def test_credentials_transport_error():
# It is an error to provide credentials and a transport instance.
transport = transports.IamCheckerGrpcTransport(
credentials=ga_credentials.AnonymousCredentials(), )
with pytest.raises(ValueError):
client = IamCheckerClient(
credentials=ga_credentials.AnonymousCredentials(),
transport=transport,
)
# It is an error to provide a credentials file and a transport instance.
transport = transports.IamCheckerGrpcTransport(
credentials=ga_credentials.AnonymousCredentials(), )
with pytest.raises(ValueError):
client = IamCheckerClient(
client_options={"credentials_file": "credentials.json"},
transport=transport,
)
# It is an error to provide scopes and a transport instance.
transport = transports.IamCheckerGrpcTransport(
credentials=ga_credentials.AnonymousCredentials(), )
with pytest.raises(ValueError):
client = IamCheckerClient(
client_options={"scopes": ["1", "2"]},
transport=transport,
)
def test_iam_checker_host_with_port():
client = IamCheckerClient(
credentials=ga_credentials.AnonymousCredentials(),
client_options=client_options.ClientOptions(
api_endpoint="policytroubleshooter.googleapis.com:8000"),
)
assert client.transport._host == "policytroubleshooter.googleapis.com:8000"
def test_troubleshoot_iam_policy(
transport: str = "grpc",
request_type=checker.TroubleshootIamPolicyRequest):
client = IamCheckerClient(
credentials=ga_credentials.AnonymousCredentials(),
transport=transport,
)
# Everything is optional in proto3 as far as the runtime is concerned,
# and we are mocking out the actual API, so just send an empty request.
request = request_type()
# Mock the actual call within the gRPC stub, and fake the request.
with mock.patch.object(type(client.transport.troubleshoot_iam_policy),
"__call__") as call:
# Designate an appropriate return value for the call.
call.return_value = checker.TroubleshootIamPolicyResponse(
access=explanations.AccessState.GRANTED, )
response = client.troubleshoot_iam_policy(request)
# Establish that the underlying gRPC stub method was called.
assert len(call.mock_calls) == 1
_, args, _ = call.mock_calls[0]
assert args[0] == checker.TroubleshootIamPolicyRequest()
# Establish that the response is the type that we expect.
assert isinstance(response, checker.TroubleshootIamPolicyResponse)
assert response.access == explanations.AccessState.GRANTED
def test_transport_grpc_default():
# A client should use the gRPC transport by default.
client = IamCheckerClient(
credentials=ga_credentials.AnonymousCredentials(), )
assert isinstance(
client.transport,
transports.IamCheckerGrpcTransport,
)
def test_iam_checker_auth_adc_old_google_auth():
# If no credentials are provided, we should use ADC credentials.
with mock.patch.object(google.auth, "default", autospec=True) as adc:
adc.return_value = (ga_credentials.AnonymousCredentials(), None)
IamCheckerClient()
adc.assert_called_once_with(
scopes=("https://www.googleapis.com/auth/cloud-platform", ),
quota_project_id=None,
)
def test_troubleshoot_iam_policy_empty_call():
# This test is a coverage failsafe to make sure that totally empty calls,
# i.e. request == None and no flattened fields passed, work.
client = IamCheckerClient(
credentials=ga_credentials.AnonymousCredentials(),
transport="grpc",
)
# Mock the actual call within the gRPC stub, and fake the request.
with mock.patch.object(type(client.transport.troubleshoot_iam_policy),
"__call__") as call:
client.troubleshoot_iam_policy()
call.assert_called()
_, args, _ = call.mock_calls[0]
assert args[0] == checker.TroubleshootIamPolicyRequest()
def test_iam_checker_client_client_options_from_dict():
with mock.patch(
"google.cloud.policytroubleshooter_v1.services.iam_checker.transports.IamCheckerGrpcTransport.__init__"
) as grpc_transport:
grpc_transport.return_value = None
client = IamCheckerClient(
client_options={"api_endpoint": "squid.clam.whelk"})
grpc_transport.assert_called_once_with(
credentials=None,
credentials_file=None,
host="squid.clam.whelk",
scopes=None,
client_cert_source_for_mtls=None,
quota_project_id=None,
client_info=transports.base.DEFAULT_CLIENT_INFO,
always_use_jwt_access=True,
)
def test_client_withDEFAULT_CLIENT_INFO():
client_info = gapic_v1.client_info.ClientInfo()
with mock.patch.object(transports.IamCheckerTransport,
"_prep_wrapped_messages") as prep:
client = IamCheckerClient(
credentials=ga_credentials.AnonymousCredentials(),
client_info=client_info,
)
prep.assert_called_once_with(client_info)
with mock.patch.object(transports.IamCheckerTransport,
"_prep_wrapped_messages") as prep:
transport_class = IamCheckerClient.get_transport_class()
transport = transport_class(
credentials=ga_credentials.AnonymousCredentials(),
client_info=client_info,
)
prep.assert_called_once_with(client_info)
def test_transport_instance():
# A client may be instantiated with a custom transport instance.
transport = transports.IamCheckerGrpcTransport(
credentials=ga_credentials.AnonymousCredentials(), )
client = IamCheckerClient(transport=transport)
assert client.transport is transport