Function TestPublicKeyFromKeyRef

internal/utils/private_key_test.go:209–343

(t *testing.T)

}

func TestPublicKeyFromKeyRef(t *testing.T) {
	tests := []struct {
		name      string
		keyRef    string
		setup     func(fs afero.Fs, ctx context.Context)
		expectErr bool
		errMsg    string
	}{
		{
			name:   "file path",
			keyRef: "/path/to/public-key.pem",
			setup: func(fs afero.Fs, ctx context.Context) {
				err := afero.WriteFile(fs, "/path/to/public-key.pem", []byte("test public key content"), 0o600)
				require.NoError(t, err)
			},
			expectErr: false,
		},
		{
			name:   "k8s secret with explicit key field",
			keyRef: "k8s://test-namespace/test-secret/public-key",
			setup: func(fs afero.Fs, ctx context.Context) {
				// This will be handled in the test loop
			},
			expectErr: false,
		},
		{
			name:   "k8s secret with single key (auto-select)",
			keyRef: "k8s://test-namespace/single-key-secret",
			setup: func(fs afero.Fs, ctx context.Context) {
				// This will be handled in the test loop
			},
			expectErr: false,
		},
		{
			name:   "k8s secret with multiple keys (no key field specified)",
			keyRef: "k8s://test-namespace/multi-key-secret",
			setup: func(fs afero.Fs, ctx context.Context) {
				// This will be handled in the test loop
			},
			expectErr: true,
			errMsg:    "contains multiple keys, please specify the key field",
		},
		{
			name:      "invalid k8s format",
			keyRef:    "k8s://invalid-format",
			setup:     func(fs afero.Fs, ctx context.Context) {},
			expectErr: true,
			errMsg:    "invalid k8s key reference format",
		},
		{
			name:      "file not found",
			keyRef:    "/nonexistent/public-key.pem",
			setup:     func(fs afero.Fs, ctx context.Context) {},
			expectErr: true,
			errMsg:    "read key from file",
		},
	}