test(certificates): Add ratcheting test for CSR conditions

This commit is contained in:
yongruilin
2025-09-15 23:32:48 +00:00
parent 3da0a255f7
commit 71797498f9

View File

@@ -177,6 +177,11 @@ func testValidateUpdateForDeclarative(t *testing.T, apiVersion string) {
),
subresources: []string{"/approval"}, // Can only modify Approved and Denied conditions on /approval subresource
},
"ratcheting: allow existing duplicate types - valid": {
old: makeValidCSR(withApprovedCondition(), withApprovedCondition(), withDeniedCondition(), withDeniedCondition()),
update: makeValidCSR(withDeniedCondition(), withDeniedCondition(), withApprovedCondition(), withApprovedCondition()),
subresources: []string{"/status"},
},
}
for k, tc := range testCases {