test: fix auth CI regressions

Signed-off-by: Ryan S <267728323+ironcommit@users.noreply.github.com>

Author: ironcommit

packages/nemo_platform_plugin/tests/test_client_auth.py

@@ -44,8 +44,10 @@
 )
 from nemo_platform_plugin.client.tls import NMP_CLIENT_SSL_CERT_FILE_ENVVAR
 from nemo_platform_plugin.client_provider import (
+    DefaultNemoClientProvider,
     get_async_nemo_client,
     get_nemo_client,
+    set_nemo_client_provider,
 )
 
 
@@ -870,6 +872,12 @@ def test_async_from_config(self, tmp_path):
 
 
 class TestGetNemoClient:
+    @pytest.fixture(autouse=True)
+    def _use_default_provider(self):
+        set_nemo_client_provider(DefaultNemoClientProvider())
+        yield
+        set_nemo_client_provider(None)
+
     def test_returns_sync_client(self):
         client = get_nemo_client(as_service="test-svc", internal=True)
         assert isinstance(client, NemoClient)

tests/auth_idp/static/test_authentik_kubernetes_demo.py

@@ -1003,7 +1003,7 @@ def test_authentik_umbrella_chart_applies_blueprint_with_waitable_helm_hook() ->
 @pytest.mark.auth_idp_k8s
 def test_authentik_tokenreview_rbac_does_not_grant_pod_or_job_reads() -> None:
     template = (HELM_DIR / "templates" / "tokenreview-rbac.yaml").read_text(encoding="utf-8")
-    cluster_role = yaml.safe_load(template.split("---", maxsplit=1)[0])
+    cluster_role = yaml.safe_load(_strip_leading_helm_spdx_comments(template).split("---", maxsplit=1)[0])
     rules = cluster_role["rules"]
     permissions = {
         (tuple(rule.get("apiGroups", [])), tuple(rule.get("resources", [])), tuple(rule.get("verbs", [])))