From d32f88f981c79523f694400e3a8283da11987e18 Mon Sep 17 00:00:00 2001
From: Shuting Zhao <shutting06@gmail.com>
Date: Fri, 26 Jul 2019 18:27:59 -0700
Subject: [PATCH] add unit test case

---
 pkg/engine/overlay_test.go | 137 +++++++++++++++++++++++++++++++++++++
 1 file changed, 137 insertions(+)

diff --git a/pkg/engine/overlay_test.go b/pkg/engine/overlay_test.go
index 1de11f88d4..134da5f027 100644
--- a/pkg/engine/overlay_test.go
+++ b/pkg/engine/overlay_test.go
@@ -809,3 +809,140 @@ func TestProcessOverlayPatches_anchorOnPeer(t *testing.T) {
 	assert.Error(t, err, "Conditions are not met")
 	assert.Assert(t, len(patches) == 0)
 }
+
+func TestProcessOverlayPatches_insertWithCondition(t *testing.T) {
+	resourceRaw := []byte(`{
+		"apiVersion": "apps/v1",
+		"kind": "Deployment",
+		"metadata": {
+		   "name": "psp-demo-unprivileged",
+		   "labels": {
+			  "app.type": "prod"
+		   }
+		},
+		"spec": {
+		   "replicas": 1,
+		   "selector": {
+			  "matchLabels": {
+				 "app": "psp"
+			  }
+		   },
+		   "template": {
+			  "metadata": {
+				 "labels": {
+					"app": "psp"
+				 }
+			  },
+			  "spec": {
+				 "securityContext": {
+					"runAsNonRoot": true
+				 },
+				 "containers": [
+					{
+					   "name": "sec-ctx-unprivileged",
+					   "image": "nginxinc/nginx-unprivileged",
+					   "securityContext": {
+						  "runAsNonRoot": true,
+						  "allowPrivilegeEscalation": false
+					   },
+					   "env": [
+						  {
+							 "name": "ENV_KEY",
+							 "value": "ENV_VALUE"
+						  }
+					   ]
+					}
+				 ]
+			  }
+		   }
+		}
+	 }`)
+
+	overlayRaw := []byte(`{
+		"spec": {
+		   "template": {
+			  "spec": {
+				 "containers": [
+					{
+					   "(image)": "*/nginx-unprivileged",
+					   "securityContext": {
+						  "(runAsNonRoot)": true,
+						  "allowPrivilegeEscalation": true
+					   },
+					   "env": [
+						  {
+							 "name": "ENV_NEW_KEY",
+							 "value": "ENV_NEW_VALUE"
+						  }
+					   ]
+					}
+				 ]
+			  }
+		   }
+		}
+	 }`)
+
+	var resource, overlay interface{}
+
+	json.Unmarshal(resourceRawAnchorOnPeers, &resource)
+	json.Unmarshal(overlayRaw, &overlay)
+
+	patches, err := processOverlayPatches(resource, overlay)
+	assert.NilError(t, err)
+	assert.Assert(t, len(patches) != 0)
+
+	doc, err := ApplyPatches(resourceRaw, patches)
+	assert.NilError(t, err)
+	expectedResult := []byte(`{
+		"apiVersion": "apps/v1",
+		"kind": "Deployment",
+		"metadata": {
+		   "name": "psp-demo-unprivileged",
+		   "labels": {
+			  "app.type": "prod"
+		   }
+		},
+		"spec": {
+		   "replicas": 1,
+		   "selector": {
+			  "matchLabels": {
+				 "app": "psp"
+			  }
+		   },
+		   "template": {
+			  "metadata": {
+				 "labels": {
+					"app": "psp"
+				 }
+			  },
+			  "spec": {
+				 "securityContext": {
+					"runAsNonRoot": true
+				 },
+				 "containers": [
+					{
+					   "name": "sec-ctx-unprivileged",
+					   "image": "nginxinc/nginx-unprivileged",
+					   "securityContext": {
+						  "runAsNonRoot": true,
+						  "allowPrivilegeEscalation": true
+					   },
+					   "env": [
+						  {
+							 "name": "ENV_KEY",
+							 "value": "ENV_VALUE"
+						  },
+						  {
+							 "name": "ENV_NEW_KEY",
+							 "value": "ENV_NEW_VALUE"
+						 }
+					   ]
+					}
+				 ]
+			  }
+		   }
+		}
+	 }`)
+
+	compareJSONAsMap(t, expectedResult, doc)
+}