add testcases for altnamesforpodallowunqualified

inspectors/altnamesforpod/altnamesforpod_test.go

@@ -164,6 +164,31 @@ func TestInspect(t *testing.T) {
 			},
 			expectMessage: "Subject Alt Name contains disallowed name: example.org",
 		},
+		{
+			name: "unqualified domain with altnamesforpod",
+			setupRequest: func(request *x509.CertificateRequest) {
+				request.DNSNames = []string{
+					"172-1-0-3.somenamespace.pod.cluster.local",
+					"tls-service.somenamespace.svc.cluster.local",
+					"tls-service.somenamespace.svc",
+				}
+				request.IPAddresses = makeIps("172.1.0.3", "10.0.0.1", "10.1.2.3", "10.1.2.4")
+			},
+			expectMessage: "Subject Alt Name contains disallowed name: tls-service.somenamespace.svc",
+		},
+		{
+			name: "unqualified domain with altnamesforpodallowunqualified",
+			setupRequest: func(request *x509.CertificateRequest) {
+				request.DNSNames = []string{
+					"172-1-0-3.somenamespace.pod.cluster.local",
+					"tls-service.somenamespace.svc.cluster.local",
+					"tls-service.somenamespace.svc",
+				}
+				request.IPAddresses = makeIps("172.1.0.3", "10.0.0.1", "10.1.2.3", "10.1.2.4")
+			},
+			inspectorName: "altnamesforpodallowunqualified",
+			expectMessage: "",
+		},
 		{
 			name: "ExtraIp",
 			setupRequest: func(request *x509.CertificateRequest) {