Add test coverage for Postgres audit log functionality

[Copilot]

Addresses gaps in test coverage for the Postgres audit logging feature introduced in the parent PR.

Changes

• FakeClients signature: Changed from hardcoded "prod" environment to accept envName parameter, matching reconciler lookup pattern via env.EnvironmentName

  // Before
  func FakeClients(objects ...runtime.Object) K8sClients {
      clientSets["prod"] = clients{...}
  }
  
  // After
  func FakeClients(envName string, objects ...runtime.Object) K8sClients {
      clientSets[envName] = clients{...}
  }

• TestGeneratePostgresLogSinkName: Added coverage parallel to existing TestGenerateLogSinkName for simple names, hyphenated names, and truncation/hashing for names exceeding 100 characters

• TestPostgresAuditEnabled: Added three test cases:

  • Postgres cluster with audit.enabled: false → no sink created
  • k8sClients: nil → graceful handling without errors
  • Postgres cluster with audit.enabled: true → sink creation attempted

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• logging.googleapis.com
  • Triggering command: /tmp/go-build2238488704/b001/audit.test /tmp/go-build2238488704/b001/audit.test -test.testlogfile=/tmp/go-build2238488704/b001/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true -test.run=TestGeneratePostgresLogSinkName|TestPostgresAuditEnabled pimachinery@v0.3-ifaceassert ep/bin/linux-x64/rg --gdwarf-5 ions/policy/v1be-l mpile ep/bin/linux-x64internal/reconcilers/google/audit/sql.go -o dDuleILOr .cfg 0.1-go1.25.6.linux-amd64/pkg/tool/linux_amd64/vet -p cilers/google/au-o mpile 0.1-go1.25.6.lin-importcfg (dns block)
  • Triggering command: /tmp/go-build3375315084/b001/audit.test /tmp/go-build3375315084/b001/audit.test -test.testlogfile=/tmp/go-build3375315084/b001/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true -test.run=TestGeneratePostgresLogSinkName|TestPostgresAuditEnabled om/go-openapi/sw-ifaceassert ep/bin/linux-x64/rg -p ions/storage/v1a-l mpile ep/bin/linux-x64internal/reconcilers/google/audit/iam.go -o en8D88-EN .cfg 0.1-go1.25.6.linux-amd64/pkg/tool/linux_amd64/vet -p enapi/swag/jsonu-atomic mpile cilers/google/au-buildtags (dns block)
  • Triggering command: /tmp/go-build1234764806/b001/audit.test /tmp/go-build1234764806/b001/audit.test -test.testlogfile=/tmp/go-build1234764806/b001/testlog.txt -test.paniconexit0 -test.timeout=10m0s /tmp/go-build2238488704/b831/vet.cfg g_.a pi@v0.35.0/apiserverinternal/v1a-ifaceassert 0.1-go1.25.6.linux-amd64/pkg/tool/linux_amd64/vet -p d/autoscaling/v2-l mpile 0.1-go1.25.6.lininternal/reconcilers/google/audit/log_buckets.go -w v-guQjFeh .cfg ux-amd64/pkg/tool/linux_amd64/vet -c v1 mpile ux-amd64/pkg/too-buildtags (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.