Also delete fsGroup and runAsUser when undefined

The parent security context object may not include these fields at all,
leaving them as undefined after the spread in data(). The existing
empty-string and null guards did not cover this case.

Author: codyrancher

shell/components/form/Security.vue

@@ -141,11 +141,11 @@ export default {
       }
 
       // Drop empty values so we don't send a string for int64 fields.
-      if (securityContext.fsGroup === '' || securityContext.fsGroup === null) {
+      if (securityContext.fsGroup === '' || securityContext.fsGroup === null || securityContext.fsGroup === undefined) {
         delete securityContext.fsGroup;
       }
 
-      if (securityContext.runAsUser === '' || securityContext.runAsUser === null) {
+      if (securityContext.runAsUser === '' || securityContext.runAsUser === null || securityContext.runAsUser === undefined) {
         delete securityContext.runAsUser;
       }
 

shell/components/form/__tests__/Security.test.ts

@@ -98,6 +98,23 @@ describe('component: Security', () => {
       expect(Object.prototype.hasOwnProperty.call(last, 'runAsUser')).toBe(false);
     });
 
+    it('should omit runAsUser from the emitted value when it is undefined', async() => {
+      const wrapper = mount(Security, {
+        props: {
+          mode: _EDIT, formType: FORM_TYPES.CONTAINER, value: {}
+        }
+      });
+
+      const checkbox = wrapper.find('[data-testid="input-security-runasNonRoot"]').find('label');
+
+      await checkbox.trigger('click');
+
+      const events = wrapper.emitted('update:value') ?? [];
+      const last = events[events.length - 1][0] as Record<string, unknown>;
+
+      expect(Object.prototype.hasOwnProperty.call(last, 'runAsUser')).toBe(false);
+    });
+
     it.each([
       'privileged',
       'allowPrivilegeEscalation',
@@ -159,6 +176,26 @@ describe('component: Security', () => {
       expect(wrapper.emitted('update:value')).toHaveLength(1);
     });
 
+    it.each([
+      'runAsUser',
+      'fsGroup',
+    ])('should omit %p from the emitted value when it is undefined', async(field) => {
+      const wrapper = mount(Security, {
+        props: {
+          mode: _EDIT, formType: FORM_TYPES.POD, value: {}
+        }
+      });
+
+      const checkbox = wrapper.find('[data-testid="input-security-runasNonRoot"]').find('label');
+
+      await checkbox.trigger('click');
+
+      const events = wrapper.emitted('update:value') ?? [];
+      const last = events[events.length - 1][0] as Record<string, unknown>;
+
+      expect(Object.prototype.hasOwnProperty.call(last, field)).toBe(false);
+    });
+
     // Regression for #9601 — see equivalent container-level test above.
     it.each([
       ['runAsUser', { runAsUser: 33 }],