1import { GcpEnvironment } from "@/GCP/Environment";
2import * as GCP from "@/GCP";
3import * as Test from "@/Test/Alchemy";
4import * as apigee from "@distilled.cloud/gcp/apigee_v1";
5import { expect } from "alchemy-test";
6import * as Effect from "effect/Effect";
7import { MinimumLogLevel } from "effect/References";
8import * as Schedule from "effect/Schedule";
9
10const { test } = Test.make({ providers: GCP.providers() });
11
12const logLevel = Effect.provideService(
13 MinimumLogLevel,
14 process.env.DEBUG ? "Debug" : "Info",
15);
16
17// Needs a provisioned Apigee organization on the testing project (paid, or
18// ~1h eval provisioning); without one calls fail with ApigeeResourceNotFound (403 "Permission
19// denied on resource \"organizations/{project}\" (or it may not exist)").
20// Set GCP_TEST_APIGEE_ORG=1 when the org exists.
21const runLifecycle = !!process.env.GCP_TEST_APIGEE_ORG;
22
23const waitUntilGone = (name: string) =>
24 apigee.getOrganizationsSecurityMonitoringConditions({ name }).pipe(
25 Effect.as("found" as const),
26 Effect.catchTag("NotFound", () => Effect.succeed("gone" as const)),
27 Effect.catchTag("ApigeeResourceNotFound", () =>
28 Effect.succeed("gone" as const),
29 ),
30 Effect.repeat({
31 schedule: Schedule.spaced("1 second"),
32 until: (status) => status === "gone",
33 times: 10,
34 }),
35 );
36
37test.provider(
38 "getOrganizationsSecurityMonitoringConditions on a missing condition fails with ApigeeResourceNotFound",
39 (stack) =>
40 Effect.gen(function* () {
41 const { project } = yield* GcpEnvironment.current;
42 const org = `organizations/${project}`;
43
44 yield* stack.destroy();
45
46 const error = yield* Effect.flip(
47 apigee.getOrganizationsSecurityMonitoringConditions({
48 name: `${org}/securityMonitoringConditions/alchemy-missing`,
49 }),
50 );
51 expect(error._tag).toEqual("ApigeeResourceNotFound");
52
53 yield* stack.destroy();
54 }).pipe(logLevel),
55 { tags: ["provider:gcp", "provider:gcp:apigee", "live"], timeout: 90_000 },
56);
57
58test.provider.skipIf(!runLifecycle)(
59 "create, update, and delete a security monitoring condition",
60 (stack) =>
61 Effect.gen(function* () {
62 yield* stack.destroy();
63
64 const created = yield* stack.deploy(
65 Effect.gen(function* () {
66 const profile = yield* GCP.Apigee.SecurityProfilesV2("Default", {
67 description: "default scoring",
68 });
69 const condition = yield* GCP.Apigee.SecurityMonitoringCondition(
70 "Eval",
71 {
72 profile: profile.name,
73 includeAllResources: true,
74 },
75 );
76 return { profile, condition };
77 }),
78 );
79
80 expect(created.condition.securityMonitoringConditionId).toEqual(
81 expect.any(String),
82 );
83 expect(created.condition.profile).toEqual(created.profile.name);
84 expect(created.condition.includeAllResources).toEqual(true);
85
86 const fetched =
87 yield* apigee.getOrganizationsSecurityMonitoringConditions({
88 name: created.condition.name,
89 });
90 expect(fetched.profile).toEqual(created.profile.name);
91
92 const updated = yield* stack.deploy(
93 Effect.gen(function* () {
94 const profile = yield* GCP.Apigee.SecurityProfilesV2("Default", {
95 securityProfileV2Id: created.profile.securityProfileV2Id,
96 description: "default scoring",
97 });
98 const condition = yield* GCP.Apigee.SecurityMonitoringCondition(
99 "Eval",
100 {
101 securityMonitoringConditionId:
102 created.condition.securityMonitoringConditionId,
103 profile: profile.name,
104 includeAllResources: false,
105 },
106 );
107 return { profile, condition };
108 }),
109 );
110
111 expect(updated.condition.name).toEqual(created.condition.name);
112 expect(updated.condition.includeAllResources).toEqual(false);
113
114 yield* stack.destroy();
115
116 const gone = yield* waitUntilGone(created.condition.name);
117 expect(gone).toEqual("gone");
118 }).pipe(logLevel),
119 { tags: ["provider:gcp", "provider:gcp:apigee", "live"], timeout: 90_000 },
120);