def test_get_audit_logs_bigquery_bindings_local(self): yaml_dict = yaml.load(TEST_PROJECT_YAML) project = ProjectConfig(project=yaml_dict['projects'][0], audit_logs_project=None, forseti=yaml_dict['forseti']) got_bindings = project.get_audit_logs_bigquery_bindings() want_bindings = [ { 'role': 'OWNER', 'members': [{ 'group_email': '*****@*****.**' }], }, { 'role': 'WRITER', 'members': [{ 'user_email': '*****@*****.**' }], }, { 'role': 'READER', 'members': [{ 'group_email': '*****@*****.**' }], }, ] self.assertEqual(got_bindings, want_bindings)
def test_get_audit_logs_bigquery_bindings_remote(self): yaml_dict = yaml.load(TEST_PROJECT_YAML) project_dict = yaml_dict['projects'][0] # Set remote audit logs instead of local audit logs. project_dict['audit_logs'] = { 'logs_bigquery_dataset': { 'name': 'some_data_logs' }, } audit_logs_project = { 'project_id': 'audit-logs', 'owners_group': '*****@*****.**', } forseti = yaml_dict['forseti'] project = ProjectConfig(project=project_dict, audit_logs_project=audit_logs_project, forseti=forseti) got_bindings = project.get_audit_logs_bigquery_bindings() want_bindings = [ { 'role': 'OWNER', 'members': [{ 'group_email': '*****@*****.**' }], }, { 'role': 'WRITER', 'members': [{ 'user_email': '*****@*****.**' }], }, { 'role': 'READER', 'members': [{ 'group_email': '*****@*****.**' }], }, ] self.assertEqual(got_bindings, want_bindings)