@@ -359,6 +359,9 @@ func TestNetworks(t *testing.T) {
359359 servicePerimeterLink := fmt .Sprintf ("accessPolicies/%s/servicePerimeters/%s" , policyID , networks .GetStringOutput ("restricted_service_perimeter_name" ))
360360 accessLevel := fmt .Sprintf ("accessPolicies/%s/accessLevels/%s" , policyID , networks .GetStringOutput ("access_level_name_dry_run" ))
361361 networkNames := getNetworkResourceNames (envCode , networkMode , firewallMode )
362+ baseSharedProjectID := networks .GetStringOutput ("base_host_project_id" )
363+ restrictedProjectID := networks .GetStringOutput ("restricted_host_project_id" )
364+ dnsFwZoneName := "fz-dns-hub"
362365
363366 servicePerimeter , err := gcloud .RunCmdE (t , fmt .Sprintf ("access-context-manager perimeters dry-run describe %s --policy %s" , servicePerimeterLink , policyID ))
364367 assert .NoError (err )
@@ -386,15 +389,10 @@ func TestNetworks(t *testing.T) {
386389 assert .Equal (dnsName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsName ))
387390 }
388391
389- baseSharedProjectID := networks .GetStringOutput ("base_host_project_id" )
390- dnsFwZoneName := "fz-dns-hub"
391- dnsZone := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , baseSharedProjectID , terraformSA )
392- assert .Equal (dnsFwZoneName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsFwZoneName ))
393-
394- restrictedProjectID := networks .GetStringOutput ("restricted_host_project_id" )
395- dnsFwZoneName := "fz-dns-hub"
396- dnsZone := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , restrictedProjectID , terraformSA )
397- assert .Equal (dnsFwZoneName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsFwZoneName ))
392+ dnsZoneSharedBaseHubSpoke := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , baseSharedProjectID , terraformSA )
393+ assert .Equal (dnsFwZoneName , dnsZoneSharedBaseHubSpoke .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist for base" , dnsFwZoneName ))
394+ dnsZoneRestrictedHubSpoke := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , restrictedProjectID , terraformSA )
395+ assert .Equal (dnsFwZoneName , dnsZoneRestrictedHubSpoke .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist for restricted" , dnsFwZoneName ))
398396
399397 networkName := networkNames [networkType ]["network_name" ]
400398 networkUrl := fmt .Sprintf ("https://www.googleapis.com/compute/v1/projects/%s/global/networks/%s" , projectID , networkName )
@@ -472,15 +470,10 @@ func TestNetworks(t *testing.T) {
472470 assert .Equal (googleapisCIDR [envName ][networkType ], computeRouter .Get ("bgp.advertisedIpRanges.0.range" ).String (), fmt .Sprintf ("router %s should have only range %s" , routerName , googleapisCIDR [envName ][networkType ]))
473471 assert .Equal (networkSelfLink , computeRouter .Get ("network" ).String (), fmt .Sprintf ("router %s should have be from network %s" , routerName , networkNames [networkType ]["network_name" ]))
474472
475- baseSharedProjectID := networks .GetStringOutput ("base_host_project_id" )
476- dnsFwZoneName := "fz-dns-hub"
477- dnsZone := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , baseSharedProjectID , terraformSA )
478- assert .Equal (dnsFwZoneName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsFwZoneName ))
479-
480- restrictedProjectID := networks .GetStringOutput ("restricted_host_project_id" )
481- dnsFwZoneName := "fz-dns-hub"
482- dnsZone := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , restrictedProjectID , terraformSA )
483- assert .Equal (dnsFwZoneName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsFwZoneName ))
473+ dnsZoneSharedBaseSVPC := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , baseSharedProjectID , terraformSA )
474+ assert .Equal (dnsFwZoneName , dnsZoneSharedBaseSVPC .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist for base" , dnsFwZoneName ))
475+ dnsZoneRestrictedSVPC := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , restrictedProjectID , terraformSA )
476+ assert .Equal (dnsFwZoneName , dnsZoneRestrictedSVPC .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist for restricted" , dnsFwZoneName ))
484477 }
485478 }
486479 }
@@ -490,3 +483,4 @@ func TestNetworks(t *testing.T) {
490483
491484 }
492485}
486+
0 commit comments