From 71797498f9cd4d5dcabebdc7bc4fddfb7f0462dd Mon Sep 17 00:00:00 2001 From: yongruilin Date: Mon, 15 Sep 2025 23:32:48 +0000 Subject: [PATCH] test(certificates): Add ratcheting test for CSR conditions --- .../certificates/certificates/declarative_validation_test.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkg/registry/certificates/certificates/declarative_validation_test.go b/pkg/registry/certificates/certificates/declarative_validation_test.go index d82e559eca6..ca0e3ce4df6 100644 --- a/pkg/registry/certificates/certificates/declarative_validation_test.go +++ b/pkg/registry/certificates/certificates/declarative_validation_test.go @@ -177,6 +177,11 @@ func testValidateUpdateForDeclarative(t *testing.T, apiVersion string) { ), subresources: []string{"/approval"}, // Can only modify Approved and Denied conditions on /approval subresource }, + "ratcheting: allow existing duplicate types - valid": { + old: makeValidCSR(withApprovedCondition(), withApprovedCondition(), withDeniedCondition(), withDeniedCondition()), + update: makeValidCSR(withDeniedCondition(), withDeniedCondition(), withApprovedCondition(), withApprovedCondition()), + subresources: []string{"/status"}, + }, } for k, tc := range testCases {