Merge pull request 'OZG-3328 cleanup and add helm tests for operators' (#19)...

Merge pull request 'OZG-3328 cleanup and add helm tests for operators' (#19) from OZG-3328 into master

ozgcloud-elasticsearch-operator/src/main/helm/values.yaml

@@ -2,7 +2,3 @@
 image:
   repo: docker.ozg-sh.de
 
-elasticsearch:
-    namespace: elastic-system
-    adminSecretName: ozg-search-cluster-es-elastic-user
-    certificateSecretName: ozg-search-cluster-es-http-ca-internal

ozgcloud-elasticsearch-operator/src/test/helm/configmap_bindings_type_test.yaml

@@ -32,6 +32,8 @@ tests:
     asserts:
       - isKind:
           of: ConfigMap
+      - isAPIVersion:
+          of: v1
       - equal:
           path: metadata.name
           value: bindings-type

ozgcloud-elasticsearch-operator/src/test/helm/deployment_container_test.yaml

@@ -28,13 +28,17 @@ release:
   namespace: sh-helm-test
 templates:
   - deployment.yaml
-tests:
-  - it: validate image type and container image
 set:
   image:
     name: hase
     tag: latest
   imagePullSecret: imagePullSecret
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
+tests:
+  - it: validate image type and container image
     asserts:
       - equal:
           path: spec.template.spec.containers[0].name
@@ -47,11 +51,6 @@ tests:
           value: Always
 
   - it: validate health checks
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - equal:
           path: spec.template.spec.containers[0].readinessProbe
@@ -78,11 +77,6 @@ tests:
             timeoutSeconds: 5
 
   - it: validate security context
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - equal:
           path: spec.template.spec.containers[0].securityContext

ozgcloud-elasticsearch-operator/src/test/helm/deployment_env_test.yaml → ozgcloud-elasticsearch-operator/src/test/helm/deployment_env_customList_test.yaml

@@ -25,9 +25,13 @@
 suite: test environments
 templates:
   - templates/deployment.yaml
+set: 
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
 tests:
   - it: check customList
-    template: deployment.yaml
     set:
       env.customList:
         - name: my_test_environment_name

ozgcloud-elasticsearch-operator/src/test/helm/deployment_matchlabels_test.yaml

@@ -28,6 +28,11 @@ release:
   namespace: sh-helm-test
 templates:
   - templates/deployment.yaml
+set: 
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
 tests:
   - it: check matchlabels
     set:

ozgcloud-elasticsearch-operator/src/test/helm/deployment_metadata_test.yaml

@@ -28,42 +28,35 @@ release:
   namespace: sh-helm-test
 templates:
   - templates/deployment.yaml
-tests:
-  - it: check metadata labels
 set:
   image:
     name: hase
     tag: latest
   imagePullSecret: imagePullSecret
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
+
+tests:
+  - it: check metadata labels
     asserts:
       - equal:
-          path: metadata.labels["app.kubernetes.io/instance"]
-          value: ozgcloud-elasticsearch-operator
-      - equal:
-          path: metadata.labels["app.kubernetes.io/name"]
-          value: ozgcloud-elasticsearch-operator
-      - equal:
-          path: metadata.labels["app.kubernetes.io/part-of"]
-          value: ozg
-      - equal:
-          path: metadata.labels["app.kubernetes.io/namespace"]
-          value: sh-helm-test
+          path: metadata.labels
+          value: 
+            app.kubernetes.io/instance: ozgcloud-elasticsearch-operator
+            app.kubernetes.io/managed-by: Helm
+            app.kubernetes.io/name: ozgcloud-elasticsearch-operator
+            app.kubernetes.io/namespace: sh-helm-test
+            app.kubernetes.io/part-of: ozg
+            app.kubernetes.io/version: 0.0.0-MANAGED-BY-JENKINS
+            helm.sh/chart: ozgcloud-elasticsearch-operator-0.0.0-MANAGED-BY-JENKINS
   - it: check metadata name
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - equal:
           path: metadata.name
           value: ozgcloud-elasticsearch-operator
   - it: check metadata namespace
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - equal:
           path: metadata.namespace

ozgcloud-elasticsearch-operator/src/test/helm/deployment_pull_secret_test.yaml

@@ -28,6 +28,11 @@ release:
   namespace: sh-helm-test
 templates:
   - deployment.yaml
+set: 
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
 tests:
   - it: validate image pull secret resource name
     set:

ozgcloud-elasticsearch-operator/src/test/helm/deployment_resources_test.yaml

@@ -27,6 +27,15 @@ release:
   name: afm-adapter
 templates:
   - templates/deployment.yaml
+set:
+  image:
+    name: hase
+    tag: latest
+  imagePullSecret: imagePullSecret
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
 tests:
   - it: test resources
     set:
@@ -37,10 +46,6 @@ tests:
         requests:
           cpu: "33m"
           memory: "44Mi"
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - equal:
           path: spec.template.spec.containers[0].resources.limits.cpu
@@ -56,11 +61,6 @@ tests:
           value: 44Mi
 
   - it: test empty resources
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - isEmpty:
           path: spec.template.spec.containers[0].resources

ozgcloud-elasticsearch-operator/src/test/helm/deployment_template_spec_test.yaml

@@ -28,35 +28,29 @@ release:
   namespace: sh-helm-test
 templates:
   - deployment.yaml
-tests:
-  - it: validate serviceaccount name
 set:
   image:
     name: hase
     tag: latest
   imagePullSecret: imagePullSecret  
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
+tests:
+  - it: validate serviceaccount name
     asserts:
       - equal:
           path: spec.template.spec.serviceAccountName
           value: ozgcloud-elasticsearch-operator-serviceaccount
     
   - it: validate restartPolicy
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - equal:
           path: spec.template.spec.restartPolicy
           value: Always
 
   - it: validate dns config
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - equal:
           path: spec.template.spec.dnsConfig
@@ -64,3 +58,17 @@ tests:
       - equal:
           path: spec.template.spec.dnsPolicy
           value: ClusterFirst
+  - it: should have correct values for container terminationMessagePolicy, terminationMessagePath, stdin, tty
+    asserts:
+      - equal:
+          path: spec.template.spec.containers[0].terminationMessagePolicy
+          value: File
+      - equal:
+          path: spec.template.spec.containers[0].terminationMessagePath
+          value: /dev/termination-log
+      - equal: 
+          path: spec.template.spec.containers[0].stdin
+          value: true
+      - equal: 
+          path: spec.template.spec.containers[0].tty
+          value: true
\ No newline at end of file

ozgcloud-elasticsearch-operator/src/test/helm/deployment_type_test.yaml

@@ -28,13 +28,17 @@ release:
   namespace: sh-helm-test
 templates:
   - deployment.yaml
-tests:
-  - it: validate template type and api Version
 set:
   image:
     name: hase
     tag: latest
   imagePullSecret: imagePullSecret
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
+tests:
+  - it: validate template type and api Version
     asserts:
       - isKind:
           of: Deployment

ozgcloud-elasticsearch-operator/src/test/helm/deployment_volumes.yaml → ozgcloud-elasticsearch-operator/src/test/helm/deployment_volumes_test.yaml

@@ -22,19 +22,24 @@
 # unter der Lizenz sind dem Lizenztext zu entnehmen.
 #
 
-suite: deployment type test
+suite: deployment volumes test
 release:
   name: elastic-test-operator
   namespace: sh-helm-test
 templates:
-  - deployment.yaml
-tests:
-  - it: should create SERVICE_BINDING_ROOT
+  - templates/deployment.yaml
+
 set:
   image:
     name: hase
     tag: latest
   imagePullSecret: imagePullSecret
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
+tests:
+  - it: should create SERVICE_BINDING_ROOT
     asserts:
       - contains:
           path: spec.template.spec.containers[0].env
@@ -43,11 +48,6 @@ tests:
             value: "/bindings"
 
   - it: should create volumes
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - contains:
           path: spec.template.spec.volumes
@@ -64,11 +64,6 @@ tests:
                 optional: false
 
   - it: should create volumeMounts
-    set:
-      image:
-        name: hase
-        tag: latest
-      imagePullSecret: imagePullSecret
     asserts:
       - contains:
           path: spec.template.spec.containers[0].volumeMounts

ozgcloud-elasticsearch-operator/src/test/helm/linter_values.yaml

@@ -5,7 +5,7 @@ image:
 
 imagePullSecret: "docker-secret"
 
-env:
-  customList:
-    - name: my_test_environment_name
-      value: "A test value"
+elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
\ No newline at end of file

ozgcloud-elasticsearch-operator/src/test/helm/rbac/ozgcloud_elasticsearch_operator_admin_secret_view_role_test.yaml

@@ -28,6 +28,11 @@ release:
   namespace: test-namespace
 templates:
   - templates/rbac/ozgcloud_elasticsearch_operator_admin_secret_view_role.yaml
+set: 
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
 tests:
   - it: should have apiVersion
     asserts: 

ozgcloud-elasticsearch-operator/src/test/helm/rbac/ozgcloud_elasticsearch_operator_admin_secret_view_rolebinding_test.yaml

@@ -28,6 +28,11 @@ release:
   namespace: sh-helm-test
 templates:
   - templates/rbac/ozgcloud_elasticsearch_operator_admin_secret_view_rolebinding.yaml
+set: 
+  elasticsearch:
+    namespace: elastic-system
+    adminSecretName: ozg-search-cluster-es-elastic-user
+    certificateSecretName: ozg-search-cluster-es-http-ca-internal
 tests:
   - it: should have apiVersion
     asserts: 

ozgcloud-elasticsearch-operator/src/test/helm/rbac/ozgcloud_elasticsearch_operator_serviceaccount_test.yaml

@@ -33,6 +33,8 @@ tests:
     asserts:
       - isKind:
           of: ServiceAccount
+      - isAPIVersion:
+          of: v1
       - equal:
           path: metadata.name
           value: ozgcloud-elasticsearch-operator-serviceaccount

ozgcloud-keycloak-operator/src/test/helm/crds/operator.ozgcloud.de_OzgKeycloakClient_test.yaml

+suite: operator.ozgcloud.de_OzgCloudKeycloakClient test
+templates:
+  - templates/crds/operator.ozgcloud.de_OzgKeycloakClient.yaml 
+tests:
+  - it: should have apiVersion
+    asserts: 
+      - equal:
+          path: apiVersion
+          value: apiextensions.k8s.io/v1
+  - it: should have isKind of
+    asserts:
+      - isKind:
+          of: CustomResourceDefinition
+
+  - it: should have metadata name
+    asserts:
+      - equal:
+          path: metadata.name
+          value: ozgcloudkeycloakclients.operator.ozgcloud.de
+
+  - it: should have spec group
+    asserts:
+      - equal:
+          path: spec.group
+          value: operator.ozgcloud.de
+  - it: should have spec names kind
+    asserts: 
+      - equal:
+          path: spec.names.kind
+          value: OzgCloudKeycloakClient
+  - it: should have spec names listKind
+    asserts: 
+      - equal:
+          path: spec.names.listKind
+          value: OzgCloudKeycloakClientList
+  - it: should have spec names plural
+    asserts: 
+      - equal:
+          path: spec.names.plural
+          value: ozgcloudkeycloakclients
+  - it: should have spec names singular
+    asserts: 
+      - equal:
+          path: spec.names.singular
+          value: ozgcloudkeycloakclient
+
+  - it: should have spec scope
+    asserts: 
+      - equal:
+          path: spec.scope
+          value: Namespaced
\ No newline at end of file

ozgcloud-keycloak-operator/src/test/helm/crds/operator.ozgcloud.de_OzgKeycloakClient_versions_test.yaml

+suite: operator.ozgcloud.de_OzgCloudKeycloakClient versions v1 test
+templates:
+  - templates/crds/operator.ozgcloud.de_OzgKeycloakClient.yaml
+tests:
+  - it: should have versions name
+    asserts: 
+      - equal:
+          path: spec.versions[0].name
+          value: v1
+  - it: should have versions schema description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.description
+          value: OzgCloudKeycloakClient is the Schema for the keycloaks API
+  - it: should have versions schema type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.type
+          value: object
+          
+  - it: should have versions schema apiVersion property type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.apiVersion.type
+          value: string
+  - it: should have versions schema apiVersion property description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.apiVersion.description
+          value: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              
+  - it: should have versions schema kind property type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.kind.type
+          value: string
+  - it: should have versions schema kind property description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.kind.description
+          value: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+          
+  - it: should have versions schema metadata
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.metadata.type
+          value: object
+          
+  - it: should have versions schema spec description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.spec.description
+          value: Spec defines the desired state of Keycloak
+  - it: should have versions schema spec type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.spec.type
+          value: object
+  - it: should have versions schema spec preserve unknown fields
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.spec.x-kubernetes-preserve-unknown-fields
+          value: true
+          
+  - it: should have versions schema status description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.status.description
+          value: Status defines the observed state of Keycloak
+  - it: should have versions schema status type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.status.type
+          value: object
+  - it: should have versions schema status preserve unknown fields
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.status.x-kubernetes-preserve-unknown-fields
+          value: true
+          
+  - it: should have versions served
+    asserts: 
+      - equal:
+          path: spec.versions[0].served
+          value: true
+  - it: should have versions storage
+    asserts: 
+      - equal:
+          path: spec.versions[0].storage
+          value: true
+  - it: should have versions subresources statis
+    asserts: 
+      - equal:
+          path: spec.versions[0].subresources.status
+          value: {}
\ No newline at end of file

ozgcloud-keycloak-operator/src/test/helm/crds/operator.ozgcloud.de_OzgKeycloakGroup_test.yaml

+suite: operator.ozgcloud.de_OzgCloudKeycloakGroup test
+templates:
+  - templates/crds/operator.ozgcloud.de_OzgKeycloakGroup.yaml 
+tests:
+  - it: should have apiVersion
+    asserts: 
+      - equal:
+          path: apiVersion
+          value: apiextensions.k8s.io/v1
+  - it: should have isKind of
+    asserts:
+      - isKind:
+          of: CustomResourceDefinition
+
+  - it: should have metadata name
+    asserts:
+      - equal:
+          path: metadata.name
+          value: ozgcloudkeycloakgroups.operator.ozgcloud.de
+
+  - it: should have spec group
+    asserts:
+      - equal:
+          path: spec.group
+          value: operator.ozgcloud.de
+  - it: should have spec names kind
+    asserts: 
+      - equal:
+          path: spec.names.kind
+          value: OzgCloudKeycloakGroup
+  - it: should have spec names listKind
+    asserts: 
+      - equal:
+          path: spec.names.listKind
+          value: OzgCloudKeycloakGroupList
+  - it: should have spec names plural
+    asserts: 
+      - equal:
+          path: spec.names.plural
+          value: ozgcloudkeycloakgroups
+  - it: should have spec names singular
+    asserts: 
+      - equal:
+          path: spec.names.singular
+          value: ozgcloudkeycloakgroup
+
+  - it: should have spec scope
+    asserts: 
+      - equal:
+          path: spec.scope
+          value: Namespaced
\ No newline at end of file

ozgcloud-keycloak-operator/src/test/helm/crds/operator.ozgcloud.de_OzgKeycloakGroup_versions_test.yaml

+suite: operator.ozgcloud.de_OzgCloudKeycloakGroup versions v1 test
+templates:
+  - templates/crds/operator.ozgcloud.de_OzgKeycloakGroup.yaml
+tests:
+  - it: should have versions name
+    asserts: 
+      - equal:
+          path: spec.versions[0].name
+          value: v1
+  - it: should have versions schema description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.description
+          value: OzgCloudKeycloakGroup is the Schema for the keycloaks API
+  - it: should have versions schema type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.type
+          value: object
+          
+  - it: should have versions schema apiVersion property type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.apiVersion.type
+          value: string
+  - it: should have versions schema apiVersion property description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.apiVersion.description
+          value: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              
+  - it: should have versions schema kind property type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.kind.type
+          value: string
+  - it: should have versions schema kind property description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.kind.description
+          value: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' 
+          
+  - it: should have versions schema metadata
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.metadata.type
+          value: object
+          
+  - it: should have versions schema spec description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.spec.description
+          value: Spec defines the desired state of Keycloak
+  - it: should have versions schema spec type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.spec.type
+          value: object
+  - it: should have versions schema spec preserve unknown fields
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.spec.x-kubernetes-preserve-unknown-fields
+          value: true
+          
+  - it: should have versions schema status description
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.status.description
+          value: Status defines the observed state of Keycloak
+  - it: should have versions schema status type
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.status.type
+          value: object
+  - it: should have versions schema status preserve unknown fields
+    asserts: 
+      - equal:
+          path: spec.versions[0].schema.openAPIV3Schema.properties.status.x-kubernetes-preserve-unknown-fields
+          value: true
+          
+  - it: should have versions served
+    asserts: 
+      - equal:
+          path: spec.versions[0].served
+          value: true
+  - it: should have versions storage
+    asserts: 
+      - equal:
+          path: spec.versions[0].storage
+          value: true
+  - it: should have versions subresources statis
+    asserts: 
+      - equal:
+          path: spec.versions[0].subresources.status
+          value: {}
\ No newline at end of file

ozgcloud-keycloak-operator/src/test/helm/crds/operator.ozgcloud.de_OzgKeycloakRealms_test.yaml

+suite: operator.ozgcloud.de_OzgCloudKeycloakRealms test
+templates:
+  - templates/crds/operator.ozgcloud.de_OzgKeycloakRealms.yaml 
+tests:
+  - it: should have apiVersion
+    asserts: 
+      - equal:
+          path: apiVersion
+          value: apiextensions.k8s.io/v1
+  - it: should have isKind of
+    asserts:
+      - isKind:
+          of: CustomResourceDefinition
+
+  - it: should have metadata name
+    asserts:
+      - equal:
+          path: metadata.name
+          value: ozgcloudkeycloakrealms.operator.ozgcloud.de
+
+  - it: should have spec group
+    asserts:
+      - equal:
+          path: spec.group
+          value: operator.ozgcloud.de
+  - it: should have spec names kind
+    asserts: 
+      - equal:
+          path: spec.names.kind
+          value: OzgCloudKeycloakRealm
+  - it: should have spec names listKind
+    asserts: 
+      - equal:
+          path: spec.names.listKind
+          value: OzgCloudKeycloakRealmList
+  - it: should have spec names plural
+    asserts: 
+      - equal:
+          path: spec.names.plural
+          value: ozgcloudkeycloakrealms
+  - it: should have spec names singular
+    asserts: 
+      - equal:
+          path: spec.names.singular
+          value: ozgcloudkeycloakrealm
+
+  - it: should have spec scope
+    asserts: 
+      - equal:
+          path: spec.scope
+          value: Namespaced
\ No newline at end of file