Add additional test for TooManyOperatorGroups

There was already one like this when the OperatorGroup was not being
specified in the OperatorPolicy, but this helps keep things complete.

Signed-off-by: Justin Kulikauskas <jkulikau@redhat.com>

test/e2e/case38_install_operator_test.go

@@ -12,7 +12,7 @@ import (
 	"open-cluster-management.io/config-policy-controller/test/utils"
 )
 
-var _ = Describe("Test installing an operator from OperatorPolicy", Ordered, func() {
+var _ = FDescribe("Test installing an operator from OperatorPolicy", Ordered, func() {
 	const (
 		opPolTestNS      = "operator-policy-testns"
 		parentPolicyYAML = "../resources/case38_operator_install/parent-policy.yaml"
@@ -213,6 +213,8 @@ var _ = Describe("Test installing an operator from OperatorPolicy", Ordered, fun
 			incorrectOpGroupName = "incorrect-operator-group"
 			scopedOpGroupYAML    = "../resources/case38_operator_install/scoped-operator-group.yaml"
 			scopedOpGroupName    = "scoped-operator-group"
+			extraOpGroupYAML     = "../resources/case38_operator_install/extra-operator-group.yaml"
+			extraOpGroupName     = "extra-operator-group"
 		)
 
 		BeforeAll(func() {
@@ -344,6 +346,39 @@ var _ = Describe("Test installing an operator from OperatorPolicy", Ordered, fun
 				"the OperatorGroup was updated to match the policy",
 			)
 		})
+		It("Should become NonCompliant when an extra OperatorGroup is added", func() {
+			utils.Kubectl("apply", "-f", extraOpGroupYAML, "-n", opPolTestNS)
+			check(
+				opPolName,
+				true,
+				[]policyv1.RelatedObject{{
+					Object: policyv1.ObjectResource{
+						Kind:       "OperatorGroup",
+						APIVersion: "operators.coreos.com/v1",
+					},
+					Compliant: "NonCompliant",
+					Reason:    "There is more than one OperatorGroup in this namespace",
+				}, {
+					Object: policyv1.ObjectResource{
+						Kind:       "OperatorGroup",
+						APIVersion: "operators.coreos.com/v1",
+						Metadata: policyv1.ObjectMetadata{
+							Name:      extraOpGroupName,
+							Namespace: opPolTestNS,
+						},
+					},
+					Compliant: "NonCompliant",
+					Reason:    "There is more than one OperatorGroup in this namespace",
+				}},
+				metav1.Condition{
+					Type:    "OperatorGroupCompliant",
+					Status:  metav1.ConditionFalse,
+					Reason:  "TooManyOperatorGroups",
+					Message: "there is more than one OperatorGroup in the namespace",
+				},
+				"there is more than one OperatorGroup in the namespace",
+			)
+		})
 	})
 	Describe("Testing Subscription behavior for musthave mode while enforcing", Ordered, func() {
 		const (