add tests

Author: theomagellan

internal/controller/datadogagent/component/agent/default_test.go

@@ -1,6 +1,7 @@
 package agent
 
 import (
+	"fmt"
 	"testing"
 
 	"k8s.io/utils/ptr"
@@ -216,6 +217,48 @@ func TestDefaultSyscallsForSystemProbe(t *testing.T) {
 	}
 }
 
+func TestHostProfilerContainer(t *testing.T) {
+	dda := &metav1.ObjectMeta{Name: "foo", Namespace: "default", Labels: map[string]string{}}
+
+	containers := agentOptimizedContainers(dda, []apicommon.AgentContainerName{
+		apicommon.CoreAgentContainerName,
+		apicommon.HostProfiler,
+	})
+	assert.Len(t, containers, 2)
+
+	c := containers[1]
+	assert.Equal(t, string(apicommon.HostProfiler), c.Name)
+	assert.NotNil(t, c.SecurityContext)
+	assert.Nil(t, c.SecurityContext.Privileged, "host-profiler should not run as privileged")
+	assert.NotNil(t, c.SecurityContext.SeccompProfile)
+	assert.Equal(t, corev1.SeccompProfileTypeLocalhost, c.SecurityContext.SeccompProfile.Type)
+	assert.Equal(t, common.HostProfilerSeccompProfileName, *c.SecurityContext.SeccompProfile.LocalhostProfile)
+}
+
+func TestInitHostProfilerSeccompSetupContainer(t *testing.T) {
+	dda := &metav1.ObjectMeta{Name: "foo", Namespace: "default", Labels: map[string]string{}}
+
+	initContainers := initContainers(dda, []apicommon.AgentContainerName{apicommon.HostProfiler})
+
+	var setupContainer *corev1.Container
+	for i := range initContainers {
+		if initContainers[i].Name == "host-profiler-seccomp-setup" {
+			setupContainer = &initContainers[i]
+			break
+		}
+	}
+	assert.NotNil(t, setupContainer, "host-profiler-seccomp-setup init container should exist")
+	dst := fmt.Sprintf("%s/%s", common.SeccompRootVolumePath, common.HostProfilerSeccompProfileName)
+	assert.Contains(t, setupContainer.Command, dst, "cp command should copy to the kubelet seccomp path")
+
+	mountNames := map[string]bool{}
+	for _, m := range setupContainer.VolumeMounts {
+		mountNames[m.Name] = true
+	}
+	assert.True(t, mountNames[common.HostProfilerSecurityVolumeName])
+	assert.True(t, mountNames[common.SeccompRootVolumeName])
+}
+
 func TestPrivateActionRunnerContainer(t *testing.T) {
 	dda := &metav1.ObjectMeta{
 		Name:      "test-dda",