test(aws-sdk-extension): add non-EKS JWT raise path test

Author: alimx07

sdk-extension/opentelemetry-sdk-extension-aws/src/opentelemetry/sdk/extension/aws/resource/eks.py

@@ -38,6 +38,7 @@
     r"^https://oidc\.eks\.[^.]+\.amazonaws\.com(?:\.cn)?/id/[A-F0-9]{32}$",
     re.ASCII,
 )
+
 def _aws_http_request(method, path, cred_value):
     with urlopen(
         Request(

sdk-extension/opentelemetry-sdk-extension-aws/tests/resource/test_eks.py

@@ -155,7 +155,7 @@ def test_if_no_eks_paths_should_not_raise(
     @patch(
         "opentelemetry.sdk.extension.aws.resource.eks._get_k8s_cred_value",
         return_value=_bearer_jwt(
-            {"iss": "https://oidc.eks.eu-west-2.amazonaws.com/id/EXAMPLE123"}
+            {"iss": "https://oidc.eks.eu-west-2.amazonaws.com/id/A1B2C3D4E5F6A1B2C3D4E5F6A1B2C3D4"}
         ),
     )
     @patch(
@@ -197,6 +197,50 @@ def test_eks_oidc_jwt_detected(
         "opentelemetry.sdk.extension.aws.resource.eks._is_k8s",
         return_value=True,
     )
-    def test_non_eks_jwt_returns_empty(self, mock_is_k8s, mock_get_k8s_cred_value):
+    def test_non_eks_jwt_returns_empty(
+        self, mock_is_k8s, mock_get_k8s_cred_value
+    ):
         actual = AwsEksResourceDetector().detect()
         self.assertEqual(actual.attributes, {})
+
+    @patch(
+        "opentelemetry.sdk.extension.aws.resource.eks._get_k8s_cred_value",
+        return_value=_bearer_jwt({"iss": "https://wrong.jwt.com"}),
+    )
+    @patch(
+        "opentelemetry.sdk.extension.aws.resource.eks._is_k8s",
+        return_value=True,
+    )
+    def test_non_eks_jwt_should_raise(
+        self, mock_is_k8s, mock_get_k8s_cred_value
+    ):
+        with self.assertRaises(RuntimeError):
+            AwsEksResourceDetector(raise_on_error=True).detect()
+
+    @patch(
+        "opentelemetry.sdk.extension.aws.resource.eks._get_k8s_cred_value",
+        return_value="Bearer notajwt.otel",
+    )
+    @patch(
+        "opentelemetry.sdk.extension.aws.resource.eks._is_k8s",
+        return_value=True,
+    )
+    def test_is_eks_wrong_parts_count_should_raise(
+        self, mock_is_k8s, mock_get_k8s_cred_value
+    ):
+        with self.assertRaises(RuntimeError):
+            AwsEksResourceDetector(raise_on_error=True).detect()
+
+    @patch(
+        "opentelemetry.sdk.extension.aws.resource.eks._get_k8s_cred_value",
+        return_value="Bearer header.eyJpc3MiOg.fakesig",
+    )
+    @patch(
+        "opentelemetry.sdk.extension.aws.resource.eks._is_k8s",
+        return_value=True,
+    )
+    def test_is_eks_invalid_json_payload_should_raise(
+        self, mock_is_k8s, mock_get_k8s_cred_value
+    ):
+        with self.assertRaises(RuntimeError):
+            AwsEksResourceDetector(raise_on_error=True).detect()