fix(kubernetes): update Read tests to register GET mock handlers

Old Read stubs returned nil so tests passed nil meta or no GET handler.
New Reads make real HTTP calls, so tests now register a 200 GET response
to keep the ID-unchanged assertions valid after Create/Read chains.

Author: TheGnaneswar

internal/resource_kubernetes_clusterrole_cov_test.go

@@ -50,6 +50,8 @@ func TestKubernetesClusterRoleCreate_MissingName(t *testing.T) {
 // TestKubernetesClusterRoleReadNoop covers the no-op Read handler.
 func TestKubernetesClusterRoleReadNoop(t *testing.T) {
 	mock := NewMockServer(t)
+	mock.On("GET", "/endpoints/1/kubernetes/apis/rbac.authorization.k8s.io/v1/clusterroles/cluster-reader",
+		RespondString(http.StatusOK, "application/json", "{}"))
 
 	r := resourceKubernetesClusterRoles()
 	d := r.TestResourceData()

internal/resource_kubernetes_clusterrolebinding_cov_test.go

@@ -53,6 +53,8 @@ func TestKubernetesClusterRoleBindingCreate_HTTPError(t *testing.T) {
 // TestKubernetesClusterRoleBindingReadNoop covers the no-op Read handler.
 func TestKubernetesClusterRoleBindingReadNoop(t *testing.T) {
 	mock := NewMockServer(t)
+	mock.On("GET", "/endpoints/1/kubernetes/apis/rbac.authorization.k8s.io/v1/clusterrolebindings/global-admin",
+		RespondString(http.StatusOK, "application/json", "{}"))
 
 	r := resourceKubernetesClusterRoleBindings()
 	d := r.TestResourceData()

internal/resource_kubernetes_configmaps_cov_test.go

@@ -63,10 +63,14 @@ func TestKubernetesConfigMapsDelete_404IsSuccess(t *testing.T) {
 }
 
 func TestKubernetesConfigMapsRead_NoOp(t *testing.T) {
+	mock := NewMockServer(t)
+	mock.On("GET", "/endpoints/1/kubernetes/api/v1/namespaces/ns/configmaps/keep",
+		RespondString(http.StatusOK, "application/json", "{}"))
+
 	r := resourceKubernetesConfigMaps()
 	d := r.TestResourceData()
 	d.SetId("1:ns:keep")
-	if err := rcRead(r, d, nil); err != nil {
+	if err := rcRead(r, d, mock.Client()); err != nil {
 		t.Fatalf("Read should be no-op, got %v", err)
 	}
 	if d.Id() != "1:ns:keep" {

internal/resource_kubernetes_cronjob_cov_test.go

@@ -63,10 +63,14 @@ func TestKubernetesCronJobDelete_404IsSuccess(t *testing.T) {
 }
 
 func TestKubernetesCronJobRead_NoOp(t *testing.T) {
+	mock := NewMockServer(t)
+	mock.On("GET", "/endpoints/1/kubernetes/apis/batch/v1/namespaces/ns/cronjobs/keep",
+		RespondString(http.StatusOK, "application/json", "{}"))
+
 	r := resourceKubernetesCronJob()
 	d := r.TestResourceData()
 	d.SetId("1:ns:keep")
-	if err := rcRead(r, d, nil); err != nil {
+	if err := rcRead(r, d, mock.Client()); err != nil {
 		t.Fatalf("Read should be no-op, got %v", err)
 	}
 	if d.Id() != "1:ns:keep" {

internal/resource_kubernetes_helm_test.go

@@ -12,6 +12,12 @@ func TestKubernetesHelmCreate_HappyPath(t *testing.T) {
 	mock := NewMockServer(t)
 
 	mock.On("POST", "/endpoints/3/kubernetes/helm", RespondJSON(http.StatusCreated, map[string]interface{}{}))
+	mock.On("GET", "/endpoints/3/kubernetes/helm/my-nginx", RespondJSON(http.StatusOK, map[string]interface{}{
+		"chartReference": map[string]interface{}{
+			"chartPath": "nginx",
+			"repoURL":   "https://charts.bitnami.com/bitnami",
+		},
+	}))
 
 	r := resourceKubernetesHelm()
 	d := r.TestResourceData()
@@ -108,6 +114,8 @@ func TestKubernetesHelmDelete_HappyPath(t *testing.T) {
 // TestKubernetesHelmRead_Noop verifies Read is a no-op.
 func TestKubernetesHelmRead_Noop(t *testing.T) {
 	mock := NewMockServer(t)
+	mock.On("GET", "/endpoints/3/kubernetes/helm/my-nginx",
+		RespondJSON(http.StatusOK, map[string]interface{}{"chartReference": map[string]interface{}{"chartPath": "nginx", "repoURL": "https://charts.bitnami.com/bitnami"}}))
 
 	r := resourceKubernetesHelm()
 	d := r.TestResourceData()

internal/resource_kubernetes_job_cov_test.go

@@ -63,10 +63,14 @@ func TestKubernetesJobDelete_404IsSuccess(t *testing.T) {
 }
 
 func TestKubernetesJobRead_NoOp(t *testing.T) {
+	mock := NewMockServer(t)
+	mock.On("GET", "/endpoints/1/kubernetes/apis/batch/v1/namespaces/ns/jobs/keep",
+		RespondString(http.StatusOK, "application/json", "{}"))
+
 	r := resourceKubernetesJob()
 	d := r.TestResourceData()
 	d.SetId("1:ns:keep")
-	if err := rcRead(r, d, nil); err != nil {
+	if err := rcRead(r, d, mock.Client()); err != nil {
 		t.Fatalf("Read should be no-op, got %v", err)
 	}
 	if d.Id() != "1:ns:keep" {

internal/resource_kubernetes_namespace_system_cov2_test.go

@@ -1,13 +1,16 @@
 package internal
 
 import (
+	"net/http"
 	"testing"
 )
 
 // TestKubernetesNamespaceSystemCov2_Read_NoOp verifies Read is a pure no-op
 // (returns nil and touches no endpoint).
 func TestKubernetesNamespaceSystemCov2_Read_NoOp(t *testing.T) {
 	mock := NewMockServer(t)
+	mock.On("GET", "/kubernetes/1/namespaces/kube-system",
+		RespondJSON(http.StatusOK, map[string]interface{}{"IsSystem": false}))
 
 	r := resourceKubernetesNamespaceSystem()
 	d := r.TestResourceData()

internal/resource_kubernetes_namespace_test.go

@@ -14,6 +14,7 @@ func TestKubernetesNamespaceCreate_HappyPath_Unlicensed(t *testing.T) {
 	// Unlicensed: /licenses returns empty list.
 	mock.On("GET", "/licenses", RespondJSON(http.StatusOK, []map[string]interface{}{}))
 	mock.On("POST", "/kubernetes/1/namespaces", RespondJSON(http.StatusOK, map[string]interface{}{}))
+	mock.On("GET", "/kubernetes/1/namespaces/my-ns", RespondJSON(http.StatusOK, map[string]interface{}{"Name": "my-ns"}))
 
 	r := resourceKubernetesNamespace()
 	d := r.TestResourceData()
@@ -70,6 +71,7 @@ func TestKubernetesNamespaceCreate_HappyPath_Licensed(t *testing.T) {
 		{"id": 1, "company": "ACME"},
 	}))
 	mock.On("POST", "/kubernetes/2/namespaces", RespondJSON(http.StatusOK, map[string]interface{}{}))
+	mock.On("GET", "/kubernetes/2/namespaces/team-a", RespondJSON(http.StatusOK, map[string]interface{}{"Name": "team-a"}))
 
 	r := resourceKubernetesNamespace()
 	d := r.TestResourceData()

internal/resource_kubernetes_role_cov_test.go

@@ -53,6 +53,8 @@ func TestKubernetesRoleCreate_MissingName(t *testing.T) {
 // TestKubernetesRoleReadNoop covers the no-op Read handler.
 func TestKubernetesRoleReadNoop(t *testing.T) {
 	mock := NewMockServer(t)
+	mock.On("GET", "/endpoints/1/kubernetes/apis/rbac.authorization.k8s.io/v1/namespaces/default/roles/pod-reader",
+		RespondString(http.StatusOK, "application/json", "{}"))
 
 	r := resourceKubernetesRoles()
 	d := r.TestResourceData()

internal/resource_kubernetes_rolebinding_cov_test.go

@@ -53,6 +53,8 @@ func TestKubernetesRoleBindingCreate_MissingName(t *testing.T) {
 // TestKubernetesRoleBindingReadNoop covers the no-op Read handler.
 func TestKubernetesRoleBindingReadNoop(t *testing.T) {
 	mock := NewMockServer(t)
+	mock.On("GET", "/endpoints/1/kubernetes/apis/rbac.authorization.k8s.io/v1/namespaces/default/rolebindings/read-pods",
+		RespondString(http.StatusOK, "application/json", "{}"))
 
 	r := resourceKubernetesRoleBindings()
 	d := r.TestResourceData()