54 lines
2.0 KiB
Python
54 lines
2.0 KiB
Python
# Copyright 2020 Google LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
|
|
import os
|
|
import pytest
|
|
|
|
|
|
FIXTURES_DIR = os.path.join(os.path.dirname(__file__), 'fixture')
|
|
|
|
|
|
def test_folder_roles(plan_runner):
|
|
"Test folder roles."
|
|
_, modules = plan_runner(FIXTURES_DIR, is_module=False)
|
|
resources = modules['module.test.module.environment-folders']
|
|
folders = [r for r in resources if r['type'] == 'google_folder']
|
|
assert len(folders) == 2
|
|
assert set(r['values']['display_name']
|
|
for r in folders) == set(['prod', 'test'])
|
|
bindings = [r['index'].split('-')
|
|
for r in resources if r['type'] == 'google_folder_iam_binding']
|
|
assert len(bindings) == 10
|
|
assert set(b[0] for b in bindings) == set(['prod', 'test'])
|
|
assert len(set(b[1] for b in bindings)) == 5
|
|
|
|
|
|
def test_org_roles(plan_runner):
|
|
"Test folder roles."
|
|
vars = {
|
|
'organization_id': 'organizations/123',
|
|
'iam_xpn_config': '{grant = true, target_org = true}'
|
|
}
|
|
_, modules = plan_runner(FIXTURES_DIR, is_module=False, **vars)
|
|
resources = modules['module.test.module.environment-folders']
|
|
folder_bindings = [r['index'].split('-')
|
|
for r in resources if r['type'] == 'google_folder_iam_binding']
|
|
assert len(folder_bindings) == 8
|
|
resources = modules['module.test.module.tf-service-accounts']
|
|
org_bindings = [r['index'].split('-')
|
|
for r in resources if r['type'] == 'google_organization_iam_member']
|
|
assert len(org_bindings) == 4
|
|
assert set(b[0] for b in org_bindings) == set(['prod', 'test'])
|