OIDC values do not reach tenant realm-group templates unless Helm also
knows the Keycloak API. Harbor's Gateway setting bypasses its Ingress
certificate branches, so certificate fixtures need the ingress path.
Assisted-By: LLM
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
A fixture with unused scheduling keys can render successfully without
exercising scheduling. A skip caused by an unrelated failure can also
survive after its original lookup restriction is gone. These cases need
checks of the rendered result and the failure reason.
Assisted-By: LLM
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
An empty shared-service namespace disables templates that tenants with
inherited services rely on. Rendering only that state leaves those
templates unchecked.
Assisted-By: LLM
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
helm-unittest suites can select individual templates, leaving other
templates unchecked even when the chart's tests pass. Rendering the full
chart with the platform's injected values catches those failures before
a cluster is needed.
Assisted-By: LLM
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
Myasnikov Daniil