Migrate secret-manager tests
This commit is contained in:
parent
a2bffc7302
commit
1927b138d6
|
@ -45,7 +45,7 @@ module "secret-manager" {
|
|||
}
|
||||
}
|
||||
}
|
||||
# tftest modules=1 resources=4
|
||||
# tftest modules=1 resources=4 inventory=iam.yaml
|
||||
```
|
||||
|
||||
### Secret versions
|
||||
|
@ -70,7 +70,7 @@ module "secret-manager" {
|
|||
}
|
||||
}
|
||||
}
|
||||
# tftest modules=1 resources=5
|
||||
# tftest modules=1 resources=5 inventory=versions.yaml
|
||||
```
|
||||
<!-- BEGIN TFDOC -->
|
||||
|
||||
|
|
|
@ -0,0 +1,46 @@
|
|||
# Copyright 2023 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
values:
|
||||
module.secret-manager.google_secret_manager_secret.default["test-auto"]:
|
||||
project: my-project
|
||||
replication:
|
||||
- automatic: true
|
||||
user_managed: []
|
||||
secret_id: test-auto
|
||||
module.secret-manager.google_secret_manager_secret.default["test-manual"]:
|
||||
project: my-project
|
||||
replication:
|
||||
- automatic: null
|
||||
user_managed:
|
||||
- replicas:
|
||||
- customer_managed_encryption: []
|
||||
location: europe-west1
|
||||
- customer_managed_encryption: []
|
||||
location: europe-west4
|
||||
secret_id: test-manual
|
||||
module.secret-manager.google_secret_manager_secret_iam_binding.default["test-auto.roles/secretmanager.secretAccessor"]:
|
||||
condition: []
|
||||
members:
|
||||
- group:auto-readers@example.com
|
||||
role: roles/secretmanager.secretAccessor
|
||||
module.secret-manager.google_secret_manager_secret_iam_binding.default["test-manual.roles/secretmanager.secretAccessor"]:
|
||||
condition: []
|
||||
members:
|
||||
- group:manual-readers@example.com
|
||||
role: roles/secretmanager.secretAccessor
|
||||
|
||||
counts:
|
||||
google_secret_manager_secret: 2
|
||||
google_secret_manager_secret_iam_binding: 2
|
|
@ -1,4 +1,4 @@
|
|||
# Copyright 2022 Google LLC
|
||||
# Copyright 2023 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
|
@ -11,3 +11,18 @@
|
|||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
values:
|
||||
module.secret-manager.google_secret_manager_secret_version.default["test-auto:v1"]:
|
||||
enabled: false
|
||||
secret_data: auto foo bar baz
|
||||
module.secret-manager.google_secret_manager_secret_version.default["test-auto:v2"]:
|
||||
enabled: true
|
||||
secret_data: auto foo bar spam
|
||||
module.secret-manager.google_secret_manager_secret_version.default["test-manual:v1"]:
|
||||
enabled: true
|
||||
secret_data: manual foo bar spam
|
||||
|
||||
counts:
|
||||
google_secret_manager_secret: 2
|
||||
google_secret_manager_secret_version: 3
|
|
@ -1,42 +0,0 @@
|
|||
/**
|
||||
* Copyright 2022 Google LLC
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
|
||||
module "test" {
|
||||
source = "../../../../modules/secret-manager"
|
||||
project_id = "my-project"
|
||||
iam = {
|
||||
secret-1 = {
|
||||
"roles/secretmanager.secretAccessor" = [
|
||||
"serviceAccount:service-account.example.com"
|
||||
]
|
||||
}
|
||||
secret-2 = {
|
||||
"roles/secretmanager.viewer" = [
|
||||
"serviceAccount:service-account.example.com"
|
||||
]
|
||||
}
|
||||
}
|
||||
secrets = {
|
||||
secret-1 = ["europe-west1"],
|
||||
secret-2 = null
|
||||
}
|
||||
versions = {
|
||||
secret-1 = {
|
||||
foobar = { enabled = true, data = "foobar" }
|
||||
}
|
||||
}
|
||||
labels = var.labels
|
||||
}
|
|
@ -1,20 +0,0 @@
|
|||
/**
|
||||
* Copyright 2022 Google LLC
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
|
||||
variable "labels" {
|
||||
type = map(map(string))
|
||||
default = {}
|
||||
}
|
|
@ -1,36 +0,0 @@
|
|||
# Copyright 2022 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
import pytest
|
||||
|
||||
|
||||
@pytest.fixture
|
||||
def resources(plan_runner):
|
||||
_, resources = plan_runner()
|
||||
return resources
|
||||
|
||||
|
||||
def test_resource_count(resources):
|
||||
"Test number of resources created."
|
||||
assert len(resources) == 5
|
||||
|
||||
|
||||
def test_secret_iam(resources):
|
||||
"Test secret IAM binding resources."
|
||||
bindings = [r['values'] for r in resources if r['type']
|
||||
== 'google_secret_manager_secret_iam_binding']
|
||||
assert len(bindings) == 2
|
||||
assert set(b['role'] for b in bindings) == set([
|
||||
'roles/secretmanager.secretAccessor', 'roles/secretmanager.viewer'
|
||||
])
|
Loading…
Reference in New Issue