Test profile data source against Kernel

Author: IlyaasK

.github/workflows/acceptance.yml

@@ -36,6 +36,9 @@ jobs:
           - name: Extension data source
             package: ./internal/datasources/extension
             project_id_required: true
+          - name: Profile data source
+            package: ./internal/datasources/profile
+            project_id_required: true
     # Keep the job timeout above the go test timeout so Go can report the test
     # timeout before the runner stops the job. Either hard timeout can bypass
     # t.Cleanup, so release operators still inspect for leaked test resources.

docs/acceptance.md

@@ -44,7 +44,7 @@ operation. Secrets must remain GitHub Actions secrets and must not be printed.
 | `kernel_browser_pool` data source | Test present | A uniquely created pool is read by canonical ID and byte-exact name, including normalized durable configuration, a no-drift plan, and post-destroy coded `not_found` verification. | None. |
 | `kernel_project` data source | Test present | A uniquely created project is read by canonical ID and exact name; the provider default resolves the configured project; metadata, no-drift planning, and post-destroy coded `not_found` are verified. | None. |
 | `kernel_extension` data source | Test present | A uniquely uploaded extension is read by canonical ID and exact name through explicit and provider-default project scope; metadata, no-drift planning, and post-destroy coded `not_found` are verified. | None. |
-| `kernel_profile` data source | Test missing; tag blocker | Unit and fake-client tests only. | Add durable SDK fixture create/delete helpers, then verify ID/name lookup and cleanup. Do not model runtime-written profile contents. |
+| `kernel_profile` data source | Test present | A uniquely created durable profile is read by canonical ID and exact name through explicit and provider-default project scope; metadata, no-drift planning, and post-cleanup coded `not_found` are verified. | None. |
 | `kernel_proxy` data source | Test missing; tag blocker | Unit and fake-client tests only. | Add a durable, non-secret-leaking proxy fixture strategy and verify ID/name lookup, masked metadata, and cleanup. |
 | `kernel_app` data source | Fixture blocked; tag blocker | Unit, SDK transport, pagination, ambiguity, project-scope, and Framework state tests only. | Provide a release-owned running deployment fixture or a deterministic durable deployment setup. Verify exact app/version lookup without invocation and without exposing env values. |
 | `kernel_api_key` data source | Deferred; unregistered | No provider surface yet. | Wait for a tagged SDK with exact-name filtering, then add masked ID/name lookup acceptance. |
@@ -55,14 +55,15 @@ against the release commit. The release record below supplies that evidence.
 
 ## Current Commands
 
-Run the six existing packages independently for fast failure isolation:
+Run the seven existing packages independently for fast failure isolation:
 
 ```sh
 go test -count=1 -timeout=30m -v ./internal/resources/project -run TestAcc
 go test -count=1 -timeout=30m -v ./internal/datasources/project -run TestAcc
 go test -count=1 -timeout=30m -v ./internal/resources/browserpool -run TestAcc
 go test -count=1 -timeout=30m -v ./internal/resources/extension -run TestAcc
 go test -count=1 -timeout=30m -v ./internal/datasources/extension -run TestAcc
+go test -count=1 -timeout=30m -v ./internal/datasources/profile -run TestAcc
 go test -count=1 -timeout=30m -v ./internal/datasources/browserpool -run TestAcc
 ```
 

internal/datasources/profile/datasource_acc_test.go

@@ -0,0 +1,110 @@
+package profile_test
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"testing"
+	"time"
+
+	"github.com/hashicorp/terraform-plugin-testing/helper/resource"
+	kernel "github.com/kernel/kernel-go-sdk"
+	"github.com/kernel/terraform-provider-kernel/internal/acctest"
+	"github.com/kernel/terraform-provider-kernel/internal/projectscope"
+)
+
+func TestAccProfileDataSourceByIDAndName(t *testing.T) {
+	if os.Getenv("TF_ACC") != "1" {
+		t.Skip("set TF_ACC=1 to run Terraform acceptance tests")
+	}
+	acctest.PreCheck(t)
+
+	projectID := os.Getenv(acctest.EnvProjectID)
+	if projectID == "" {
+		t.Fatalf("%s must be set for the profile data source acceptance test", acctest.EnvProjectID)
+	}
+
+	name := acctest.UniqueName(t, "profile-data")
+	id := testAccCreateProfileFixture(t, projectID, name)
+	config := testAccProfileDataSourceConfig(id, name, projectID)
+
+	resource.Test(t, resource.TestCase{
+		PreCheck:                 func() { acctest.PreCheck(t) },
+		ProtoV6ProviderFactories: acctest.ProtoV6ProviderFactories(),
+		Steps: []resource.TestStep{
+			{
+				Config: config,
+				Check: resource.ComposeAggregateTestCheckFunc(
+					resource.TestCheckResourceAttr("data.kernel_profile.by_id", "id", id),
+					resource.TestCheckResourceAttr("data.kernel_profile.by_id", "name", name),
+					resource.TestCheckResourceAttr("data.kernel_profile.by_id", "project_id", projectID),
+					resource.TestCheckResourceAttrSet("data.kernel_profile.by_id", "created_at"),
+					resource.TestCheckResourceAttr("data.kernel_profile.by_name", "id", id),
+					resource.TestCheckResourceAttr("data.kernel_profile.by_name", "name", name),
+					resource.TestCheckNoResourceAttr("data.kernel_profile.by_name", "project_id"),
+					resource.TestCheckResourceAttrSet("data.kernel_profile.by_name", "created_at"),
+				),
+			},
+			{
+				Config:   config,
+				PlanOnly: true,
+			},
+		},
+	})
+}
+
+func testAccCreateProfileFixture(t *testing.T, projectID, name string) string {
+	t.Helper()
+
+	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+	defer cancel()
+
+	profile, err := acctest.ClientFromEnv().CreateProfile(ctx, projectID, kernel.ProfileNewParams{Name: kernel.String(name)})
+	if err != nil {
+		t.Fatalf("create Kernel profile fixture: %v", err)
+	}
+	if profile == nil || profile.ID == "" {
+		t.Fatal("Kernel returned an empty profile fixture response")
+	}
+
+	// Cleanups run last-in-first-out, so deletion must register after verification.
+	testAccRequireProfileDeleted(t, projectID, profile.ID)
+	acctest.CleanupProfile(t, projectID, profile.ID)
+
+	if profile.Name != name {
+		t.Fatalf("created Kernel profile name = %q, want %q", profile.Name, name)
+	}
+	return profile.ID
+}
+
+func testAccRequireProfileDeleted(t *testing.T, projectID, id string) {
+	t.Helper()
+
+	t.Cleanup(func() {
+		ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
+		defer cancel()
+
+		_, err := acctest.ClientFromEnv().GetProfile(ctx, projectID, id)
+		if projectscope.IsNotFound(err) {
+			return
+		}
+		if err != nil {
+			t.Errorf("read Kernel profile %s after cleanup: %v", id, err)
+			return
+		}
+		t.Errorf("Kernel profile %s still exists after cleanup", id)
+	})
+}
+
+func testAccProfileDataSourceConfig(id, name, projectID string) string {
+	return acctest.ProviderConfig() + fmt.Sprintf(`
+data "kernel_profile" "by_id" {
+  id         = %q
+  project_id = %q
+}
+
+data "kernel_profile" "by_name" {
+  name = %q
+}
+`, id, projectID, name)
+}