From 2d39952b18ad3597bce8d2cf16bf6744b070397e Mon Sep 17 00:00:00 2001 From: mateo-berri <277851410+mateo-berri@users.noreply.github.com> Date: Tue, 20 Oct 2026 21:03:39 -0700 Subject: [PATCH] test(oidc): expect 503 when the metadata server answers 5xx in the integration test --- tests/integration/security/test_api_key_secret_reference.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/integration/security/test_api_key_secret_reference.py b/tests/integration/security/test_api_key_secret_reference.py index 4f69845a046..4fda6365665 100644 --- a/tests/integration/security/test_api_key_secret_reference.py +++ b/tests/integration/security/test_api_key_secret_reference.py @@ -841,7 +841,7 @@ def test_google_reference_fails_closed_when_the_metadata_server_fails(rig: _Rig) marker: Final = _marker() response: Final = _chat(rig.owned.gateway, "wif-google-unavailable", marker) reached: Final = _carrying(rig.provider.requests(), marker) - assert (response.status_code, reached) == (401, ()), (response.text, _bearers(reached)) + assert (response.status_code, reached) == (503, ()), (response.text, _bearers(reached)) assert "oidc/google secret reference could not be resolved" in response.text, response.text assert _UNAVAILABLE_AUDIENCE.removeprefix("https://") not in response.text, response.text assert _UNAVAILABLE_AUDIENCE in _asked_audiences(rig)