Function TestLocalUpdateSecrets

cli/cmd/configserver/local_test.go:227–333

(t *testing.T)

}

func TestLocalUpdateSecrets(t *testing.T) {
	t.Parallel()

	cases := []struct {
		name       string
		secretsRaw string
		newApp     *graph.App
		expected   string
	}{
		{
			// Placeholder values mean "unchanged" — UpdateSecrets must
			// merge with the on-disk value, never overwriting real
			// secrets with the placeholder sentinel.
			name:       "placeholder preserves on-disk value",
			secretsRaw: "kept = 'real-on-disk-value'\n",
			newApp: secretsApp(&model.ConfigEnvironmentVariable{
				Name:  "kept",
				Value: placeholderSecretValue,
			}),
			expected: "kept = 'real-on-disk-value'\n",
		},
		{
			// A real (non-placeholder) value is a genuine update from
			// the dashboard — write it through.
			name:       "real value writes through",
			secretsRaw: "edited = 'old-value'\n",
			newApp: secretsApp(&model.ConfigEnvironmentVariable{
				Name:  "edited",
				Value: "new-value",
			}),
			expected: "edited = 'new-value'\n",
		},
		{
			// A real value for a name that does not yet exist on disk
			// is a fresh insert.
			name:       "insert of new name writes through",
			secretsRaw: "",
			newApp: secretsApp(&model.ConfigEnvironmentVariable{
				Name:  "fresh",
				Value: "brand-new",
			}),
			expected: "fresh = 'brand-new'\n",
		},
		{
			// A name present on disk but absent from newApp.Secrets is
			// a delete — it must not be carried over.
			name:       "missing name is deleted",
			secretsRaw: "stays = 'real-stays'\ndropped = 'real-dropped'\n",
			newApp: secretsApp(&model.ConfigEnvironmentVariable{
				Name:  "stays",
				Value: placeholderSecretValue,
			}),
			expected: "stays = 'real-stays'\n",
		},
	}

	for _, tc := range cases {
		t.Run(tc.name, func(t *testing.T) {