ci(audit-storage): onboard to testing-isolation (GoogleCloudPlatform#4000)

* ci(audit-storage): onboard to testing-isolation

Use ID_TOKEN from custard testing environment and set audience when deploying to Cloud Run

* ci(audit-storage): move from dev to prod CI config

---------

Co-authored-by: David Cavazos <[email protected]>

Author: briandorsey

.github/config/nodejs-dev.jsonc

@@ -113,6 +113,7 @@
     "endpoints/getting-started",
     "endpoints/getting-started-grpc",
     "error-reporting",
+    "eventarc/audit-storage",
     "eventarc/generic",
     "eventarc/pubsub",
     "functions/concepts/afterResponse",

.github/config/nodejs-prod.jsonc

@@ -86,7 +86,6 @@
     "dialogflow-cx", // NOT_FOUND: com.google.apps.framework.request.NotFoundException: Agent 'undefined' does not exist
     "dlp", // [ERR_REQUIRE_ESM]: require() of ES Module
     "document-ai", // [ERR_REQUIRE_ESM]: require() of ES Module
-    "eventarc/audit-storage", // (untested) Environment Variable 'SERVICE_NAME' not found
     "functions/billing", // (untested) Error: Request failed with status code 500
     "functions/imagemagick", // (untested) Error: A bucket name is needed to use Cloud Storage
     "functions/ocr/app", // (untested) Error: Bucket not provided. Make sure you have a "bucket" property in your request

eventarc/audit-storage/ci-setup.json

@@ -0,0 +1,6 @@
+{
+  "env" : {
+    "SERVICE_NAME" : "eventarc-audit-storage",
+    "CONTAINER_IMAGE" : "gcr.io/${PROJECT_ID}/run-${SERVICE_NAME}-${RUN_ID}"
+  }
+}

eventarc/audit-storage/test/deploy.sh

@@ -35,6 +35,7 @@ gcloud run deploy "${SERVICE_NAME}" \
   --region="${REGION:-us-central1}" \
   ${FLAGS} \
   --platform=managed \
+  --add-custom-audiences="https://action.test/" \
   --quiet
 set +x
 

eventarc/audit-storage/test/runner.sh

@@ -20,6 +20,7 @@ requireEnv() {
   test "${!1}" || (echo "Environment Variable '$1' not found" && exit 1)
 }
 requireEnv SERVICE_NAME
+requireEnv ID_TOKEN
 
 echo '---'
 test/deploy.sh
@@ -40,7 +41,6 @@ function cleanup {
 trap cleanup EXIT
 
 # TODO: Perform authentication inside the test.
-export ID_TOKEN=$(gcloud auth print-identity-token)
 export BASE_URL=$(test/url.sh)
 
 test -z "$BASE_URL" && echo "BASE_URL value is empty" && exit 1