Function TestPrivateKeyFromKeyRef

internal/utils/private_key_test.go:32–207

(t *testing.T)

)

func TestPrivateKeyFromKeyRef(t *testing.T) {
	tests := []struct {
		name      string
		keyRef    string
		setup     func(fs afero.Fs, ctx context.Context)
		expectErr bool
		errMsg    string
	}{
		{
			name:   "file path",
			keyRef: "/path/to/key.pem",
			setup: func(fs afero.Fs, ctx context.Context) {
				err := afero.WriteFile(fs, "/path/to/key.pem", []byte("test key content"), 0o600)
				require.NoError(t, err)
			},
			expectErr: false,
		},
		{
			name:   "k8s secret with explicit key field",
			keyRef: "k8s://test-namespace/test-secret/private-key",
			setup: func(fs afero.Fs, ctx context.Context) {
				// This will be handled in the test loop
			},
			expectErr: false,
		},
		{
			name:   "k8s secret with single key (auto-select)",
			keyRef: "k8s://test-namespace/single-key-secret",
			setup: func(fs afero.Fs, ctx context.Context) {
				// This will be handled in the test loop
			},
			expectErr: false,
		},
		{
			name:   "k8s secret with multiple keys (no key field specified, defaults to cosign.key)",
			keyRef: "k8s://test-namespace/multi-key-secret",
			setup: func(fs afero.Fs, ctx context.Context) {
				// This will be handled in the test loop
			},
			expectErr: true,
			errMsg:    "key field \"cosign.key\" not found in secret",
		},
		{
			name:   "k8s secret with default cosign.key field",
			keyRef: "k8s://test-namespace/cosign-key-secret",
			setup: func(fs afero.Fs, ctx context.Context) {
				// This will be handled in the test loop
			},
			expectErr: false,
		},
		{
			name:   "k8s secret with cosign.key among multiple keys (defaults to cosign.key)",
			keyRef: "k8s://test-namespace/mixed-secret",
			setup: func(fs afero.Fs, ctx context.Context) {
				// This will be handled in the test loop
			},
			expectErr: false,
		},