/*
 * This file is part of the KubeVirt project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 * Copyright 2021 Red Hat, Inc.
 *
 */

package webhooks_test

import (
	. "github.com/onsi/ginkgo/v2"
	. "github.com/onsi/gomega"

	"kubevirt.io/kubevirt/pkg/virt-api/webhooks"
)

var _ = Describe("IsKubeVirtServiceAccount", func() {
	It("rejects an invalid service account", func() {
		Expect(webhooks.IsKubeVirtServiceAccount("invalid:service:account")).To(BeFalse())
	})
	It("recognizes all KubeVirt service accounts", func() {
		Expect(webhooks.IsKubeVirtServiceAccount("system:serviceaccount:kubevirt:kubevirt-apiserver")).To(BeTrue())
		Expect(webhooks.IsKubeVirtServiceAccount("system:serviceaccount:kubevirt:kubevirt-controller")).To(BeTrue())
		Expect(webhooks.IsKubeVirtServiceAccount("system:serviceaccount:kubevirt:kubevirt-handler")).To(BeTrue())
	})
})
