Aleksei Sviridkin 04112dacdf test(mongodb): stop the tenant-Role guards passing on the wrong document ...

The assertions withholding the key-bearing TLS Secrets from the tenant
Role addressed it as document 0 and, in two cases, asserted only with
notContains. Neither survives a rearrangement.

notContains passes when its path does not resolve, so a test built from
it alone goes green against the wrong document. Reversing the order of
the two documents in the template moved the RoleBinding into position 0,
and "does not grant the key-bearing TLS secrets when external is
enabled" and "does not grant the tenant-ca projection by name" both
stayed green while the Role granted <release>-ca-cert by name — the
Secret holding the CA private key.

Select the Role by kind, and pair every notContains with a positive
assertion on the same path so a rule reordering that moves rules[1]
reddens too. Indexing survives neither rearrangement; selecting survives
the first; the positive anchor catches the second.

Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-09-01 11:20:33 +03:00

..

apps

test(mongodb): stop the tenant-Role guards passing on the wrong document

2026-09-01 11:20:33 +03:00

core

feat(kubernetes)!: manage worker pools as KubernetesNodes, adopt on upgrade (Phase 2, breaking) (#3315)

2026-08-26 12:06:18 +04:00

extra

fix(etcd): spread members across nodes with default soft pod anti-affinity (#3962)

2026-08-26 14:27:15 +03:00

library

fix(cozy-lib): convert micro and nano quantities instead of zero

2026-08-16 22:20:17 +03:00

system

fix(mongodb): declare the trust anchor with a TenantProjection

2026-09-01 11:20:32 +03:00

tests/cozy-lib-tests

fix(cozy-lib): convert micro and nano quantities instead of zero

2026-08-16 22:20:17 +03:00