package externalsecrets

import (
	"testing"

	"edge-infra.dev/pkg/edge/constants"
	meta "edge-infra.dev/pkg/k8s/konfigkonnector/apis/meta"

	goext "github.com/external-secrets/external-secrets/apis/externalsecrets/v1beta1"
	assertapi "github.com/stretchr/testify/assert"
)

func TestBuildDefaultEdgeClusterSecretStore(t *testing.T) {
	assert := assertapi.New(t)
	projectID := "project-id"
	css := BuildDefaultEdgeClusterSecretStore(projectID)
	assert.Equal(goext.SchemeGroupVersion.String(), css.APIVersion)
	assert.Equal(goext.ClusterSecretStoreKind, css.Kind)
	assert.Equal("gcp-provider", css.Name)
	assert.Equal(map[string]string{meta.ProjectAnnotation: projectID}, css.Annotations)
	assert.Equal(map[string]string{constants.Tenant: projectID}, css.Labels)
	assert.Equal(projectID, css.Spec.Provider.GCPSM.ProjectID)
	assert.Equal("external-secrets", *css.Spec.Provider.GCPSM.Auth.SecretRef.SecretAccessKey.Namespace)
	assert.Equal("gcp-creds", css.Spec.Provider.GCPSM.Auth.SecretRef.SecretAccessKey.Name)
	assert.Equal("key.json", css.Spec.Provider.GCPSM.Auth.SecretRef.SecretAccessKey.Key)
	assert.Empty(css.Spec.Controller)
}