regenerate test expectations

efd6 · efd6 · commit 4fd68fc288d6 · 2025-05-05T07:02:43.000+09:30
diff --git a/packages/gcp/data_stream/audit/_dev/test/pipeline/test-cloudresourcemanager-googleapis-com.log-expected.json b/packages/gcp/data_stream/audit/_dev/test/pipeline/test-cloudresourcemanager-googleapis-com.log-expected.json
@@ -2,6 +2,14 @@
     "expected": [
         {
             "@timestamp": "2024-11-19T13:12:20.942Z",
+            "actor": {
+                "entity": {
+                    "id": [
+                        "serviceAccount:madeupprincipal@project-id.iam.gserviceaccount.com",
+                        "made-up-ci-account@project-id.iam.gserviceaccount.com"
+                    ]
+                }
+            },
             "client": {
                 "user": {
                     "email": "made-up-ci-account@project-id.iam.gserviceaccount.com",
@@ -139,14 +147,6 @@
                 "level": "NOTICE",
                 "logger": "projects/project-id/logs/cloudaudit.googleapis.com%2Factivity"
             },
-            "actor": {
-                "entity": {
-                    "id": [
-                        "serviceAccount:madeupprincipal@project-id.iam.gserviceaccount.com",
-                        "made-up-ci-account@project-id.iam.gserviceaccount.com"
-                    ]
-                }
-            },
             "related": {
                 "entity": [
                     "projects/project-id/roles/x",
diff --git a/packages/gcp/data_stream/audit/_dev/test/pipeline/test-compute-googleapis-com.log-expected.json b/packages/gcp/data_stream/audit/_dev/test/pipeline/test-compute-googleapis-com.log-expected.json
@@ -2,6 +2,14 @@
     "expected": [
         {
             "@timestamp": "2024-11-19T13:13:13.176Z",
+            "actor": {
+                "entity": {
+                    "id": [
+                        "serviceAccount:project-id@cloudservices.gserviceaccount.com",
+                        "project-id@cloudservices.gserviceaccount.com"
+                    ]
+                }
+            },
             "client": {
                 "user": {
                     "email": "project-id@cloudservices.gserviceaccount.com",
@@ -206,14 +214,6 @@
                 "level": "NOTICE",
                 "logger": "projects/project-id/logs/cloudaudit.googleapis.com%2Factivity"
             },
-            "actor": {
-                "entity": {
-                    "id": [
-                        "serviceAccount:project-id@cloudservices.gserviceaccount.com",
-                        "project-id@cloudservices.gserviceaccount.com"
-                    ]
-                }
-            },
             "related": {
                 "entity": [
                     "https://www.googleapis.com/compute/v1/projects/project-id/global/networks/x-logs-network",
diff --git a/packages/gcp/data_stream/audit/_dev/test/pipeline/test-iamcredentials-googleapis-com.log-expected.json b/packages/gcp/data_stream/audit/_dev/test/pipeline/test-iamcredentials-googleapis-com.log-expected.json
@@ -2,6 +2,13 @@
     "expected": [
         {
             "@timestamp": "2024-11-19T00:49:55.293Z",
+            "actor": {
+                "entity": {
+                    "id": [
+                        "principal://iam.googleapis.com/projects/project-id/locations/global/workloadIdentityPools/..."
+                    ]
+                }
+            },
             "client": {
                 "user": {
                     "id": "principal://iam.googleapis.com/projects/project-id/locations/global/workloadIdentityPools/..."
@@ -61,13 +68,6 @@
                 "level": "INFO",
                 "logger": "projects/project-id/logs/cloudaudit.googleapis.com%2Fdata_access"
             },
-            "actor": {
-                "entity": {
-                    "id": [
-                        "principal://iam.googleapis.com/projects/project-id/locations/global/workloadIdentityPools/..."
-                    ]
-                }
-            },
             "related": {
                 "entity": [
                     "projects/-/serviceAccounts/made-up-ci-account@project-id.iam.gserviceaccount.com",
diff --git a/packages/gcp/data_stream/audit/_dev/test/pipeline/test-sdh-3695.log-expected.json b/packages/gcp/data_stream/audit/_dev/test/pipeline/test-sdh-3695.log-expected.json
@@ -2,6 +2,13 @@
     "expected": [
         {
             "@timestamp": "2023-08-02T11:20:30.734Z",
+            "actor": {
+                "entity": {
+                    "id": [
+                        "joel.miller@contoso.com"
+                    ]
+                }
+            },
             "client": {
                 "user": {
                     "email": "joel.miller@contoso.com"
@@ -39,13 +46,6 @@
                 "level": "INFO",
                 "logger": "organizations/123456789098/logs/cloudaudit.googleapis.com%2Fdata_access"
             },
-            "actor": {
-                "entity": {
-                    "id": [
-                        "joel.miller@contoso.com"
-                    ]
-                }
-            },
             "related": {
                 "entity": [
                     "organizations/123456789098",
