@@ -359,6 +359,9 @@ func TestNetworks(t *testing.T) {
359
359
servicePerimeterLink := fmt .Sprintf ("accessPolicies/%s/servicePerimeters/%s" , policyID , networks .GetStringOutput ("restricted_service_perimeter_name" ))
360
360
accessLevel := fmt .Sprintf ("accessPolicies/%s/accessLevels/%s" , policyID , networks .GetStringOutput ("access_level_name_dry_run" ))
361
361
networkNames := getNetworkResourceNames (envCode , networkMode , firewallMode )
362
+ baseSharedProjectID := networks .GetStringOutput ("base_host_project_id" )
363
+ restrictedProjectID := networks .GetStringOutput ("restricted_host_project_id" )
364
+ dnsFwZoneName := "fz-dns-hub"
362
365
363
366
servicePerimeter , err := gcloud .RunCmdE (t , fmt .Sprintf ("access-context-manager perimeters dry-run describe %s --policy %s" , servicePerimeterLink , policyID ))
364
367
assert .NoError (err )
@@ -386,15 +389,10 @@ func TestNetworks(t *testing.T) {
386
389
assert .Equal (dnsName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsName ))
387
390
}
388
391
389
- baseSharedProjectID := networks .GetStringOutput ("base_host_project_id" )
390
- dnsFwZoneName := "fz-dns-hub"
391
- dnsZone := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , baseSharedProjectID , terraformSA )
392
- assert .Equal (dnsFwZoneName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsFwZoneName ))
393
-
394
- restrictedProjectID := networks .GetStringOutput ("restricted_host_project_id" )
395
- dnsFwZoneName := "fz-dns-hub"
396
- dnsZone := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , restrictedProjectID , terraformSA )
397
- assert .Equal (dnsFwZoneName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsFwZoneName ))
392
+ dnsZoneSharedBaseHubSpoke := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , baseSharedProjectID , terraformSA )
393
+ assert .Equal (dnsFwZoneName , dnsZoneSharedBaseHubSpoke .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist for base" , dnsFwZoneName ))
394
+ dnsZoneRestrictedHubSpoke := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , restrictedProjectID , terraformSA )
395
+ assert .Equal (dnsFwZoneName , dnsZoneRestrictedHubSpoke .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist for restricted" , dnsFwZoneName ))
398
396
399
397
networkName := networkNames [networkType ]["network_name" ]
400
398
networkUrl := fmt .Sprintf ("https://www.googleapis.com/compute/v1/projects/%s/global/networks/%s" , projectID , networkName )
@@ -472,15 +470,10 @@ func TestNetworks(t *testing.T) {
472
470
assert .Equal (googleapisCIDR [envName ][networkType ], computeRouter .Get ("bgp.advertisedIpRanges.0.range" ).String (), fmt .Sprintf ("router %s should have only range %s" , routerName , googleapisCIDR [envName ][networkType ]))
473
471
assert .Equal (networkSelfLink , computeRouter .Get ("network" ).String (), fmt .Sprintf ("router %s should have be from network %s" , routerName , networkNames [networkType ]["network_name" ]))
474
472
475
- baseSharedProjectID := networks .GetStringOutput ("base_host_project_id" )
476
- dnsFwZoneName := "fz-dns-hub"
477
- dnsZone := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , baseSharedProjectID , terraformSA )
478
- assert .Equal (dnsFwZoneName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsFwZoneName ))
479
-
480
- restrictedProjectID := networks .GetStringOutput ("restricted_host_project_id" )
481
- dnsFwZoneName := "fz-dns-hub"
482
- dnsZone := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , restrictedProjectID , terraformSA )
483
- assert .Equal (dnsFwZoneName , dnsZone .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist" , dnsFwZoneName ))
473
+ dnsZoneSharedBaseSVPC := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , baseSharedProjectID , terraformSA )
474
+ assert .Equal (dnsFwZoneName , dnsZoneSharedBaseSVPC .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist for base" , dnsFwZoneName ))
475
+ dnsZoneRestrictedSVPC := gcloud .Runf (t , "dns managed-zones describe %s --project %s --impersonate-service-account %s" , dnsFwZoneName , restrictedProjectID , terraformSA )
476
+ assert .Equal (dnsFwZoneName , dnsZoneRestrictedSVPC .Get ("name" ).String (), fmt .Sprintf ("dnsZone %s should exist for restricted" , dnsFwZoneName ))
484
477
}
485
478
}
486
479
}
@@ -490,3 +483,4 @@ func TestNetworks(t *testing.T) {
490
483
491
484
}
492
485
}
486
+
0 commit comments