def test_create_role(unique_custom_role_name, capsys):
custom_roles.create_role(
unique_custom_role_name,
GCLOUD_PROJECT,
CUSTOM_ROLE_TITLE,
CUSTOM_ROLE_DESCRIPTION,
CUSTOM_ROLE_PERMISSIONS,
CUSTOM_ROLE_STAGE,
)
out, _ = capsys.readouterr()
assert "Created role:" in out
def test_custom_role():
# section to create custom role to test policy updates.
custom_roles.create_role(
CUSTOM_ROLE_NAME,
GCLOUD_PROJECT,
CUSTOM_ROLE_TITLE,
CUSTOM_ROLE_DESCRIPTION,
CUSTOM_ROLE_PERMISSIONS,
CUSTOM_ROLE_STAGE,
)
yield CUSTOM_ROLE_NAME
# Delete the custom role
try:
custom_roles.delete_role(CUSTOM_ROLE_NAME, GCLOUD_PROJECT)
except googleapiclient.errors.HttpError:
print("Custom role already deleted.")
def test_custom_role():
# This custom role is reused in read/update tests.
try:
custom_roles.create_role(
CUSTOM_ROLE_NAME,
GCLOUD_PROJECT,
CUSTOM_ROLE_TITLE,
CUSTOM_ROLE_DESCRIPTION,
CUSTOM_ROLE_PERMISSIONS,
CUSTOM_ROLE_STAGE,
)
except googleapiclient.errors.HttpError as e:
if "HttpError 409" not in str(e):
raise e
# Ignore error since we just reuse the same custom role.
print('Re-using the custom role "{}".'.format(CUSTOM_ROLE_NAME))
yield CUSTOM_ROLE_NAME
def test_custom_roles(capsys):
project = os.environ['GCLOUD_PROJECT']
name = 'pythonTestCustomRole' + str(random.randint(0, 100000))
title = 'Python Test Custom Role'
description = 'This is a Python test custom role.'
permissions = ['iam.roles.get']
stage = 'GA'
custom_roles.query_testable_permissions(
'//cloudresourcemanager.googleapis.com/projects/' + project
)
out, _ = capsys.readouterr()
assert 'appengine' in out
custom_roles.get_role('roles/appengine.appViewer')
out, _ = capsys.readouterr()
assert 'roles/' in out
custom_roles.create_role(
name, project, title, description, permissions, stage)
out, _ = capsys.readouterr()
assert 'Created role:' in out
custom_roles.edit_role(name, project, title, 'Updated', permissions, stage)
out, _ = capsys.readouterr()
assert 'Updated role:' in out
custom_roles.list_roles(project)
out, _ = capsys.readouterr()
assert 'roles/' in out
custom_roles.disable_role(name, project)
out, _ = capsys.readouterr()
assert 'Disabled role:' in out
custom_roles.delete_role(name, project)
out, _ = capsys.readouterr()
assert 'Deleted role:' in out
def test_custom_roles(capsys):
project = os.environ['GCLOUD_PROJECT']
name = 'pythonTestCustomRole' + str(random.randint(0, 100000))
title = 'Python Test Custom Role'
description = 'This is a Python test custom role.'
permissions = ['iam.roles.get']
stage = 'GA'
custom_roles.query_testable_permissions(
'//cloudresourcemanager.googleapis.com/projects/' + project)
out, _ = capsys.readouterr()
assert 'appengine' in out
custom_roles.get_role('roles/appengine.appViewer')
out, _ = capsys.readouterr()
assert 'roles/' in out
custom_roles.create_role(name, project, title, description, permissions,
stage)
out, _ = capsys.readouterr()
assert 'Created role:' in out
custom_roles.edit_role(name, project, title, 'Updated', permissions, stage)
out, _ = capsys.readouterr()
assert 'Updated role:' in out
custom_roles.list_roles(project)
out, _ = capsys.readouterr()
assert 'roles/' in out
custom_roles.disable_role(name, project)
out, _ = capsys.readouterr()
assert 'Disabled role:' in out
custom_roles.delete_role(name, project)
out, _ = capsys.readouterr()
assert 'Deleted role:' in out
