package overlay

import (
	"testing"
)

// novox/hq ADR 0222, issue 190: the runtime's file and service are the runtime's module's. The
// private network writes nothing into either — being on it still grants the right to pull from the
// mesh's store in the clear (ADR 0082), and the runtime's module states that trust itself.
func TestTheNetworkWritesNothingOfTheRuntimes(t *testing.T) {
	nodes := []Node{
		{Name: "anchor", Site: "lab", Hub: true, Endpoint: "192.0.2.10:51820", Key: "k1", Address: "10.42.0.1"},
		{Name: "node2", Site: "lab", Key: "k2", Address: "10.42.0.2"},
	}
	g, err := From(nodes, "10.42.0.0/16", "")
	if err != nil {
		t.Fatal(err)
	}
	for _, node := range []string{"anchor", "node2"} {
		resources, part, err := g.Resources(node)
		if err != nil || !part {
			t.Fatalf("%s: resources: %v part=%v", node, err, part)
		}
		for _, r := range resources {
			if r["path"] == "/etc/docker/daemon.json" || r["unit"] == "docker.service" {
				t.Errorf("%s: the private network declares the runtime's %v", node, r)
			}
		}
	}
}