test(evidence): cover failed DGD query

Exercise the fail-closed operator path separately from the successful zero-row SKIP case and assert the collector emits exactly one FAIL verdict.

Signed-off-by: JS van Dijk <267467744+hogeheer499-commits@users.noreply.github.com>

Author: hogeheer499-commits

pkg/evidence/cncf/result_propagation_test.go

@@ -80,6 +80,21 @@ case "${mode}" in
         }
         SECTION="operator"
         ;;
+    operator-dynamo-query-failed)
+        # Dynamo operator is installed but the DGD query fails: preserve the
+        # fail-closed behavior instead of treating the failed query as zero rows.
+        kubectl() {
+            if [ "${1:-}" = "cluster-info" ]; then
+                return 0
+            fi
+            case " $* " in
+                *"dynamo-platform-dynamo-operator-controller-manager"*) echo "dynamo-operator 1/1" ;;
+                *" dynamographdeployments "*) return 1 ;;
+            esac
+            return 0
+        }
+        SECTION="operator"
+        ;;
     autoscaler-absent)
         SECTION="cluster-autoscaling"
         ;;
@@ -233,6 +248,14 @@ func TestEvidenceResultPropagatesThroughCollector(t *testing.T) {
 			wantStatus:        "SKIP",
 			singleVerdictFile: "robust-operator.md",
 		},
+		{
+			name:              "operator DGD query failure fails closed",
+			mode:              "operator-dynamo-query-failed",
+			displayName:       "Robust AI Operator",
+			wantStatus:        "FAIL",
+			singleVerdictFile: "robust-operator.md",
+			wantErr:           true,
+		},
 		{
 			name:              "absent autoscaler emits explicit skip",
 			mode:              "autoscaler-absent",