feat(platform): add gcloud WIF credential helper command (PYSDK-146)

[dima-aignostics]

Adds aignostics user token CLI command implementing the gcloud pluggable external credential source contract. Outputs an Aignostics id_token as JSON so gcloud can use it for Workload Identity Federation when accessing GCS.

[codecov]

❌ 1 Tests Failed:

Tests completed	Failed	Passed	Skipped
962	1	961	15

View the top 1 failed test(s) by shortest run time

tests.aignostics.application.cli_test::test_cli_run_submit_and_describe_and_cancel_and_download_and_delete

Stack Traces | 67.5s run time

runner = <typer.testing.CliRunner object at 0x7f07b08727b0>
tmp_path = PosixPath('.../pytest-20/popen-gw3/test_cli_run_submit_and_descri0')
silent_logging = None
record_property = <function record_property.<locals>.append_property at 0x7f07b0de1170>

    @pytest.mark.e2e
    @pytest.mark.long_running
    @pytest.mark.flaky(retries=3, delay=5)
    @pytest.mark.timeout(timeout=60 * 10)
    @pytest.mark.skipif(
        (platform.system() == "Linux" and platform.machine() in {"aarch64", "arm64"})
        or (platform.system() in {"Darwin", "Windows"}),
        reason=(
            "Only run on Linux x86_64 / GitHub Actions ubuntu-latest to avoid creating unnecessary load on the platform."
        ),
    )
    def test_cli_run_submit_and_describe_and_cancel_and_download_and_delete(  # noqa: PLR0915
        runner: CliRunner, tmp_path: Path, silent_logging, record_property
    ) -> None:
        """Check run submit command runs successfully."""
        record_property("tested-item-id", "TC-APPLICATION-CLI-02")
        with submitted_run(
            runner,
            tmp_path,
            CSV_CONTENT_SPOT0,
            extra_args=[
                "--note",
                "note_of_this_complex_test",
                "--tags",
                "cli-test,test_cli_run_submit_and_describe_and_cancel_and_download_and_delete,further-tag",
                "--deadline",
                (datetime.now(tz=UTC) + timedelta(minutes=10)).isoformat(),
                "--onboard-to-aignostics-portal",
                "--gpu-type",
                PIPELINE_GPU_TYPE,
                "--force",
            ],
        ) as run_id:
            # Test that we can find this run by it's note via the query parameter
            list_result = runner.invoke(
                cli,
                [
                    "application",
                    "run",
                    "list",
                    "--query",
                    "note_of_this_complex_test",
                    "--limit",
                    str(LIST_APPLICATION_RUNS_MAX_PAGE_SIZE),
                ],
            )
            assert list_result.exit_code == 0
            list_output = normalize_output(list_result.stdout)
            assert run_id in list_output, f"Run ID '{run_id}' not found when filtering by note via query"
    
            # Test that we can find this run by it's tag via the query parameter
            list_result = runner.invoke(
                cli,
                [
                    "application",
                    "run",
                    "list",
                    "--query",
                    "test_cli_run_submit_and_describe_and_cancel_and_download_and_delete",
                    "--limit",
                    str(LIST_APPLICATION_RUNS_MAX_PAGE_SIZE),
                ],
            )
            assert list_result.exit_code == 0
            list_output = normalize_output(list_result.stdout)
>           assert run_id in list_output, f"Run ID '{run_id}' not found when filtering by tag via query"
E           AssertionError: Run ID '1029fba8-b14e-48e5-a58a-41ac7a0c21dd' not found when filtering by tag via query
E           assert '1029fba8-b14e-48e5-a58a-41ac7a0c21dd' in 'Error: Failed to list runs: Failed to retrieve application runs: (503)Reason: Service UnavailableHTTP response headers: HTTPHeaderDict({\'date\': \'Mon, 06 Jul 2026 14:21:53 GMT\', \'server\': \'envoy\', \'content-length\': \'85\', \'content-type\': \'application/json\', \'x-trace-id\': \'2e3cf899d6d3238426481e3b19bd4626\', \'x-envoy-upstream-service-time\': \'5049\', \'vary\': \'Accept-Encoding\'})HTTP response body: {"detail":"Query timed out. Add additional column filters to narrow the result set."}'

.../aignostics/application/cli_test.py:586: AssertionError

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud