onemoretimeplz5

rego/allow_rollout_restart/policy_test.rego

@@ -88,10 +88,10 @@ review_deployment_patch_extra_annotations(annotationname,annotationvalue,usernam
       },
       "oldObject": {
         "spec": {
-          "template:" {
+          "template": {
             "metadata": {
               "annotations": {
-                "kubectl.kubernetes.io.restartedAt": previousrestarted
+                "kubectl.kubernetes.io/restartedAt": previousrestarted
               }
             } 
           }
@@ -101,3 +101,75 @@ review_deployment_patch_extra_annotations(annotationname,annotationvalue,usernam
   }
 }
 
+review_deployment_patch_existing(annotationname,annotationvalue,username,groupname,previousrestarted) = out {
+  out = {
+    "review": {
+      "userInfo": {
+        "username": username,
+        "groups": [ groupname ]
+      },
+      "operation": "UPDATE",
+      "kind": {
+        "kind": "Deployment"
+      },
+      "object": {
+        "spec": {
+          "template": {
+            "metadata": {
+              "annotations": {
+                  annotationname: annotationvalue
+              }
+            }
+          }
+        }
+      },
+      "oldObject": {
+        "spec": {
+          "template": {
+            "metadata": {
+              "annotations": {
+                "kubectl.kubernetes.io/restartedAt": previousrestarted
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}
+
+review_deployment_patch_absent(annotationname,annotationvalue,username,groupname) = out {
+  out = {
+    "review": {
+      "userInfo": {
+        "username": username,
+        "groups": [ groupname ]
+      },
+      "operation": "UPDATE",
+      "kind": {
+        "kind": "Deployment"
+      },
+      "oldObject": {
+        "spec": {
+          "template": {
+            "metadata": {
+              "annotations": {}
+            }
+          }
+        }
+      }, 
+      "object": {
+        "spec": {
+          "template": {
+            "metadata": {
+                "annotations": {
+                    annotationname: annotationvalue
+                }
+            }
+          }
+        }
+      }
+    }
+  }
+}
+