27245451349
67%

Ran 10 Jun 2026 12:52AM UTC

Jobs 1

Files 751

Run time 2min

Badge

Embed ▾

Committed 10 Jun 2026 12:46AM UTC coverage: 66.284% (+0.001%) from 66.283%

Build # 27245451349

Build Type

push

github

Committed by

web-flow

Commit Message

Add operator chart helm-unittest suites for posture and naming (#5477)

Extend operator chart coverage to the template logic most prone to silent
regressions and tied to past incidents:
- security context: hardened pod/container defaults (runAsNonRoot,
  readOnlyRootFilesystem, dropped caps, seccomp) must not regress
- selector labels: the immutable Deployment selector is pinned so a
  helper change can't break `helm upgrade` on existing releases
- optional metadata: pod/ServiceAccount annotations and labels inject
  correctly when set and are absent otherwise (cf. annotation-indent #4602)
- probes: liveness /healthz and readiness /readyz on the health port
- naming: fullnameOverride/nameOverride precedence for resource names
  vs name labels, and the release-name fallback
- env precedence: user env renders and chart-managed reserved vars still
  win on a name collision

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

67256 of 101467 relevant lines covered (66.28%)

64.03 hits per line

Coverage Regressions

Lines	Coverage	∆	File
3	97.36	-0.53%	pkg/authz/authorizers/cedar/core.go
3	71.85	-1.11%	pkg/ignore/processor.go
2	73.63	-0.64%	pkg/runner/config.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	27245451349.1	10 Jun 2026 12:52AM UTC	751	66.28	GitHub Action Run

stacklok / toolhive / 27245451349
67%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 27245451349

stacklok / toolhive / 27245451349 67%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 27245451349

stacklok / toolhive / 27245451349
67%

README BADGES
x