Setting app secrets can only be done by the leader - ops 2.9+ enforces this like Juju. (#322)

Author: tonyandrewmeyer

tests/unit/test_charm.py

@@ -1732,7 +1732,12 @@ def test_migration_from_single_secret(self, scope, is_leader, _, __):
         assert self.harness.charm.get_secret(scope, "operator-password") == "bla"
 
         # Reset new secret
+        # Only the leader can set app secret content.
+        with self.harness.hooks_disabled():
+            self.harness.set_leader(True)
         self.harness.charm.set_secret(scope, "operator-password", "blablabla")
+        with self.harness.hooks_disabled():
+            self.harness.set_leader(is_leader)
         assert self.harness.charm.model.get_secret(label=f"postgresql.{scope}")
         assert self.harness.charm.get_secret(scope, "operator-password") == "blablabla"
         assert SECRET_INTERNAL_LABEL not in self.harness.get_relation_data(