ci(audit-storage): onboard to testing-isolation

Use ID_TOKEN from custard testing environment and set audience when deploying to Cloud Run

Author: briandorsey

eventarc/audit-storage/ci-setup.json

@@ -0,0 +1,6 @@
+{
+  "env" : {
+    "SERVICE_NAME" : "eventarc-audit-storage",
+    "CONTAINER_IMAGE" : "gcr.io/${PROJECT_ID}/run-${SERVICE_NAME}-${RUN_ID}"
+  }
+}

eventarc/audit-storage/test/deploy.sh

@@ -35,6 +35,7 @@ gcloud run deploy "${SERVICE_NAME}" \
   --region="${REGION:-us-central1}" \
   ${FLAGS} \
   --platform=managed \
+  --add-custom-audiences="https://action.test/" \
   --quiet
 set +x
 

eventarc/audit-storage/test/runner.sh

@@ -20,6 +20,7 @@ requireEnv() {
   test "${!1}" || (echo "Environment Variable '$1' not found" && exit 1)
 }
 requireEnv SERVICE_NAME
+requireEnv ID_TOKEN
 
 echo '---'
 test/deploy.sh
@@ -40,7 +41,6 @@ function cleanup {
 trap cleanup EXIT
 
 # TODO: Perform authentication inside the test.
-export ID_TOKEN=$(gcloud auth print-identity-token)
 export BASE_URL=$(test/url.sh)
 
 test -z "$BASE_URL" && echo "BASE_URL value is empty" && exit 1