@@ -83,6 +83,21 @@ func TestAppInfra(t *testing.T) {
8383 confidentialProjectID := appInfra .GetStringOutput ("confidential_space_project_id" )
8484 confidentialInstanceName := terraform .OutputList (t , appInfra .GetTFOptions (), "confidential_instances_names" )[0 ]
8585 confidentialInstanceZone := terraform .OutputList (t , appInfra .GetTFOptions (), "confidential_instances_zones" )[0 ]
86+
87+ // gcPoolOps := gcloud.WithCommonArgs([]string{"--project", confidentialProjectID, "--format", "value(name.basename())"})
88+ // workloadIdentityPoolName := gcloud.Runf(t, "iam workload-identity-pools describe %s --location=global", workloadIdentityPool, gcPoolOps)
89+ // assert.Equal(workloadIdentityPool, workloadIdentityPoolName.String(), fmt.Sprintf("workload identity pool should have name equals to %s", workloadIdentityPool))
90+
91+ gcPoolOps := gcloud .WithCommonArgs ([]string {"--project" , confidentialProjectID , "--format" , "json" })
92+ poolDetails := gcloud .Runf (t , "iam workload-identity-pools describe %s --location=global" , workloadIdentityPool , gcPoolOps )
93+ name := poolDetails .Get ("name" ).String ()
94+ expectedName := fmt .Sprintf ("projects/%s/locations/global/workloadIdentityPools/%s" , confidentialProjectID , workloadIdentityPool )
95+ assert .Equal (expectedName , name , "Workload Identity Pool full name should match" )
96+
97+ gcPoolProviderOps := gcloud .WithCommonArgs ([]string {fmt .Sprintf ("--workload-identity-pool=%s" , workloadIdentityPool ), "--location=global" , "--project" , confidentialProjectID , "--format" , "value(displayName())" })
98+ workloadIdentityPoolProviderID := gcloud .Runf (t , "iam workload-identity-pools providers describe %s" , workloadPoolProvider , gcPoolProviderOps )
99+ assert .Equal (workloadPoolProvider , workloadIdentityPoolProviderID .String (), fmt .Sprintf ("workload identity pool provider should have name equals to %s" , workloadPoolProvider ))
100+
86101 gcInstanceOps := gcloud .WithCommonArgs ([]string {"--project" , confidentialProjectID , "--zone" , confidentialInstanceZone , "--format" , "json" })
87102 computeInstanceList := gcloud .Run (t , fmt .Sprintf ("compute instances describe %s" , confidentialInstanceName ), gcInstanceOps )
88103 assert .NotEmpty (computeInstanceList .Array (), "Expected at least one confidential instance" )
@@ -92,23 +107,9 @@ func TestAppInfra(t *testing.T) {
92107 assert .True (confidentialInstanceConfig .Get ("enableConfidentialCompute" ).Bool ())
93108 assert .Equal ("SEV" , confidentialInstanceConfig .Get ("confidentialInstanceType" ).String ())
94109 assert .Equal ("MIGRATE" , computeInstance .Get ("scheduling" ).Get ("onHostMaintenance" ).String ())
95- serviceAccounts := computeInstance .Get ("serviceAccounts" ).Array ()
96- assert .Len (serviceAccounts , 1 )
97- assert .Equal (fmt .Sprintf ("confidential-space-workload-sa@%s.iam.gserviceaccount.com" , confidentialProjectID ), serviceAccounts [0 ].Get ("email" ).String ())
98-
99- gcPoolOps := gcloud .WithCommonArgs ([]string {"--project" , confidentialProjectID , "--format" , "value(name.basename())" })
100- workloadIdentityPoolName := gcloud .Runf (t , "iam workload-identity-pools describe %s --location=global" , workloadIdentityPool , gcPoolOps )
101- assert .Equal (workloadIdentityPool , workloadIdentityPoolName .String (), fmt .Sprintf ("workload identity pool should have name equals to %s" , workloadIdentityPool ))
102-
103- // gcPoolOps := gcloud.WithCommonArgs([]string{ "--project", confidentialProjectID, "--format", "json"})
104- // poolDetails := gcloud.Runf(t, "iam workload-identity-pools describe %s --location=global", workloadIdentityPool, gcPoolOps)
105- // name := poolDetails.Get("name").String()
106- // expectedName := fmt.Sprintf("projects/%s/locations/global/workloadIdentityPools/%s", confidentialProjectID, workloadIdentityPool)
107- // assert.Equal(expectedName, name, "Workload Identity Pool full name should match")
108-
109- gcPoolProviderOps := gcloud .WithCommonArgs ([]string {fmt .Sprintf ("--workload-identity-pool=%s" , workloadIdentityPool ), "--location=global" , "--project" , confidentialProjectID , "--format" , "value(displayName())" })
110- workloadIdentityPoolProviderID := gcloud .Runf (t , "iam workload-identity-pools providers describe %s" , workloadPoolProvider , gcPoolProviderOps )
111- assert .Equal (workloadPoolProvider , workloadIdentityPoolProviderID .String (), fmt .Sprintf ("workload identity pool provider should have name equals to %s" , workloadPoolProvider ))
110+ //serviceAccounts := computeInstance.Get("serviceAccounts").Array()
111+ //assert.Len(serviceAccounts, 1)
112+ //assert.Equal(fmt.Sprintf("confidential-space-workload-sa@%s.iam.gserviceaccount.com", confidentialProjectID), serviceAccounts[0].Get("email").String())
112113 })
113114
114115 appInfra .Test ()
0 commit comments