def test_get_audit_logs_bigquery_bindings_local(self):
yaml_dict = yaml.load(TEST_PROJECT_YAML)
project = ProjectConfig(project=yaml_dict['projects'][0],
audit_logs_project=None,
forseti=yaml_dict['forseti'])
got_bindings = project.get_audit_logs_bigquery_bindings()
want_bindings = [
{
'role': 'OWNER',
'members': [{
'group_email': '*****@*****.**'
}],
},
{
'role':
'WRITER',
'members': [{
'user_email':
'*****@*****.**'
}],
},
{
'role': 'READER',
'members': [{
'group_email': '*****@*****.**'
}],
},
]
self.assertEqual(got_bindings, want_bindings)
def test_get_audit_logs_bigquery_bindings_remote(self):
yaml_dict = yaml.load(TEST_PROJECT_YAML)
project_dict = yaml_dict['projects'][0]
# Set remote audit logs instead of local audit logs.
project_dict['audit_logs'] = {
'logs_bigquery_dataset': {
'name': 'some_data_logs'
},
}
audit_logs_project = {
'project_id': 'audit-logs',
'owners_group': '*****@*****.**',
}
forseti = yaml_dict['forseti']
project = ProjectConfig(project=project_dict,
audit_logs_project=audit_logs_project,
forseti=forseti)
got_bindings = project.get_audit_logs_bigquery_bindings()
want_bindings = [
{
'role': 'OWNER',
'members': [{
'group_email': '*****@*****.**'
}],
},
{
'role':
'WRITER',
'members': [{
'user_email':
'*****@*****.**'
}],
},
{
'role': 'READER',
'members': [{
'group_email': '*****@*****.**'
}],
},
]
self.assertEqual(got_bindings, want_bindings)