Function round_trip_preserves_deny_rules

crates/openshell-policy/src/lib.rs:2433–2465

()

    #[test]
    fn round_trip_preserves_deny_rules() {
        let yaml = r#"
version: 1
network_policies:
  github:
    name: github
    endpoints:
      - host: api.github.com
        port: 443
        protocol: rest
        access: full
        deny_rules:
          - method: POST
            path: "/repos/*/pulls/*/reviews"
          - method: DELETE
            path: "/repos/*/branches/*/protection"
            query:
              force: "true"
    binaries:
      - path: /usr/bin/curl
"#;
        let proto1 = parse_sandbox_policy(yaml).expect("parse failed");
        let yaml_out = serialize_sandbox_policy(&proto1).expect("serialize failed");
        let proto2 = parse_sandbox_policy(&yaml_out).expect("re-parse failed");

        let ep1 = &proto1.network_policies["github"].endpoints[0];
        let ep2 = &proto2.network_policies["github"].endpoints[0];
        assert_eq!(ep1.deny_rules.len(), ep2.deny_rules.len());
        assert_eq!(ep2.deny_rules[0].method, "POST");
        assert_eq!(ep2.deny_rules[0].path, "/repos/*/pulls/*/reviews");
        assert_eq!(ep2.deny_rules[1].method, "DELETE");
        assert_eq!(ep2.deny_rules[1].query["force"].glob, "true");
    }

    #[test]
    fn parse_deny_rules_with_query_any() {