1import { GcpEnvironment } from "@/GCP/Environment";
2import * as GCP from "@/GCP";
3import * as Test from "@/Test/Alchemy";
4import * as apigee from "@distilled.cloud/gcp/apigee_v1";
5import { expect } from "alchemy-test";
6import * as Effect from "effect/Effect";
7import { MinimumLogLevel } from "effect/References";
8import * as Schedule from "effect/Schedule";
9
10const { test } = Test.make({ providers: GCP.providers() });
11
12const logLevel = Effect.provideService(
13 MinimumLogLevel,
14 process.env.DEBUG ? "Debug" : "Info",
15);
16
17// Needs a provisioned Apigee organization on the testing project (paid, or
18// ~1h eval provisioning); without one calls fail with ApigeeResourceNotFound (403 "Permission
19// denied on resource \"organizations/{project}\" (or it may not exist)").
20// Set GCP_TEST_APIGEE_ORG=1 when the org exists.
21const runLifecycle = !!process.env.GCP_TEST_APIGEE_ORG;
22
23const waitUntilGone = (name: string) =>
24 apigee.getOrganizationsEnvironmentsSecurityActions({ name }).pipe(
25 Effect.as("found" as const),
26 Effect.catchTag("NotFound", () => Effect.succeed("gone" as const)),
27 Effect.catchTag("ApigeeResourceNotFound", () =>
28 Effect.succeed("gone" as const),
29 ),
30 Effect.repeat({
31 schedule: Schedule.spaced("2 seconds"),
32 until: (status) => status === "gone",
33 times: 10,
34 }),
35 );
36
37test.provider(
38 "getOrganizationsEnvironmentsSecurityActions on a missing action fails with ApigeeResourceNotFound",
39 (stack) =>
40 Effect.gen(function* () {
41 const { project } = yield* GcpEnvironment.current;
42 const org = `organizations/${project}`;
43
44 yield* stack.destroy();
45
46 const error = yield* Effect.flip(
47 apigee.getOrganizationsEnvironmentsSecurityActions({
48 name: `${org}/environments/alchemy-missing/securityActions/alchemy-missing`,
49 }),
50 );
51 expect(error._tag).toEqual("ApigeeResourceNotFound");
52
53 yield* stack.destroy();
54 }).pipe(logLevel),
55 { tags: ["provider:gcp", "provider:gcp:apigee", "live"], timeout: 90_000 },
56);
57
58test.provider.skipIf(!runLifecycle)(
59 "create, update, and delete an environment security action",
60 (stack) =>
61 Effect.gen(function* () {
62 yield* stack.destroy();
63
64 const created = yield* stack.deploy(
65 Effect.gen(function* () {
66 const environment = yield* GCP.Apigee.Environment("Runtime", {
67 displayName: "runtime",
68 });
69 const action = yield* GCP.Apigee.EnvironmentsSecurityAction(
70 "BlockProbe",
71 {
72 environment: environment.environmentId,
73 description: "block probe",
74 conditionConfig: { ipAddressRanges: ["192.0.2.1"] },
75 deny: { responseCode: 403 },
76 },
77 );
78 return { environment, action };
79 }),
80 );
81
82 expect(created.action.securityActionId).toEqual(expect.any(String));
83 expect(created.action.description).toEqual("block probe");
84 expect(created.action.deny?.responseCode).toEqual(403);
85
86 const fetched = yield* apigee.getOrganizationsEnvironmentsSecurityActions(
87 {
88 name: created.action.name,
89 },
90 );
91 expect(fetched.description).toContain("alchemy-id=");
92 expect(fetched.description).toContain("block probe");
93
94 const updated = yield* stack.deploy(
95 Effect.gen(function* () {
96 const environment = yield* GCP.Apigee.Environment("Runtime", {
97 environmentId: created.environment.environmentId,
98 displayName: "runtime",
99 });
100 const action = yield* GCP.Apigee.EnvironmentsSecurityAction(
101 "BlockProbe",
102 {
103 environment: environment.environmentId,
104 securityActionId: created.action.securityActionId,
105 description: "block probe updated",
106 conditionConfig: { ipAddressRanges: ["192.0.2.1"] },
107 deny: { responseCode: 403 },
108 },
109 );
110 return { environment, action };
111 }),
112 );
113
114 expect(updated.action.name).toEqual(created.action.name);
115 expect(updated.action.description).toEqual("block probe updated");
116
117 yield* stack.destroy();
118
119 const gone = yield* waitUntilGone(created.action.name);
120 expect(gone).toEqual("gone");
121 }).pipe(logLevel),
122 { tags: ["provider:gcp", "provider:gcp:apigee", "live"], timeout: 90_000 },
123);