Add some dryrun tests for object-templates-raw

One of the tests verifies the behavior of the new error emitted when
object-templates-raw has invalid YAML.

Refs:
 - https://issues.redhat.com/browse/ACM-21504

Signed-off-by: Justin Kulikauskas <[email protected]>

Author: JustinKuli

test/dryrun/obj_tmpl_raw/invalid_yaml/output.txt

@@ -0,0 +1,3 @@
+# Diffs:
+# Compliance messages:
+NonCompliant; violation - Error parsing object-templates-raw YAML: error converting YAML to JSON: yaml: unknown anchor 'odd' referenced

test/dryrun/obj_tmpl_raw/invalid_yaml/policy.yaml

@@ -0,0 +1,20 @@
+apiVersion: policy.open-cluster-management.io/v1
+kind: ConfigurationPolicy
+metadata:
+  name: invalid-otr-yaml
+spec:
+  remediationAction: inform
+  severity: low
+  namespaceSelector:
+    include: ["default"]
+  object-templates-raw: |
+    - complianceType: musthave
+      objectDefinition:
+        apiVersion: v1
+        kind: ConfigMap
+        metadata:
+          name: sample
+          namespace: default
+        data:
+          something: *odd
+          another: valid

test/dryrun/obj_tmpl_raw/ob_tmpl_raw_test.go

@@ -0,0 +1,27 @@
+// Copyright (c) 2025 Red Hat, Inc.
+// Copyright Contributors to the Open Cluster Management project
+
+package dryruntest
+
+import (
+	"embed"
+	"testing"
+
+	"open-cluster-management.io/config-policy-controller/test/dryrun"
+)
+
+//go:embed invalid_yaml/*
+var invalidObjectTemplatesRaw embed.FS
+
+//go:embed range/*
+var rangeObjectTemplatesRaw embed.FS
+
+func TestInvalidObjectTemplatesRaw(t *testing.T) {
+	t.Run("Test noncompliant with invalid YAML in object-templates-raw",
+		dryrun.Run(invalidObjectTemplatesRaw))
+}
+
+func TestRangeObjectTemplatesRaw(t *testing.T) {
+	t.Run("Test compliant with range in object-templates-raw",
+		dryrun.Run(rangeObjectTemplatesRaw))
+}

test/dryrun/obj_tmpl_raw/range/input.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  namespace: default
+  name: nginx-pod-1
+spec:
+  containers:
+    - image: nginx:1.7.9
+      name: nginx
+      ports:
+        - containerPort: 80
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  namespace: default
+  name: nginx-pod-2
+spec:
+  containers:
+    - image: nginx:1.7.9
+      name: nginx
+      ports:
+        - containerPort: 80

test/dryrun/obj_tmpl_raw/range/output.txt

@@ -0,0 +1,7 @@
+# Diffs:
+v1 Pod default/nginx-pod-1:
+
+v1 Pod default/nginx-pod-2:
+
+# Compliance messages:
+Compliant; notification - pods [nginx-pod-1] found as specified in namespace default; notification - pods [nginx-pod-2] found as specified in namespace default

test/dryrun/obj_tmpl_raw/range/policy.yaml

@@ -0,0 +1,25 @@
+apiVersion: policy.open-cluster-management.io/v1
+kind: ConfigurationPolicy
+metadata:
+  name: policy-pod-multi-combo
+  namespace: managed
+spec:
+  remediationAction: inform
+  namespaceSelector:
+    exclude: ["kube-*"]
+    include: ["default"]
+  object-templates-raw: |
+    {{ range $id := (list 1 2) }}
+    - complianceType: musthave
+      objectDefinition:
+        apiVersion: v1
+        kind: Pod
+        metadata:
+          name: nginx-pod-{{ $id }}
+        spec:
+          containers:
+            - image: nginx:1.7.9
+              name: nginx
+              ports:
+                - containerPort: 80
+    {{ end }}