[adityasingh2400]

Please ensure you have read the contribution guide before creating a pull request.

Link to Issue or Description of Change

1. Link to an existing issue (if applicable):

• Closes: CLI unit tests run the real gcloud: an ADC browser login on every run, and they unset the default project #7880

Problem:
On a developer machine with gcloud installed, two onboarding tests in tests/unittests/cli/utils/test_cli_create.py ran the real gcloud CLI.

• test_handle_login_with_google_option_3 didn't mock gcp_utils.check_adc. The autouse mock_gcp_metadata_off fixture hides Application Default Credentials, so check_adc() is always False in the suite. Every run therefore called login_adc(), i.e. gcloud auth application-default login, which opens a browser sign-in. On CI, gcloud is missing, so the click.Abort the test expects came from the failed login rather than from choosing "3".
• test_handle_login_with_google_option_2 didn't mock _onboarding.get_gcp_project_from_gcloud. It read the real default project and, since click.confirm is mocked to True, ran gcloud config unset project on the developer's configuration.

Solution:

• option_3 mocks check_adc like the other handle_login_with_google tests, so it now reaches and covers the "3. Abandon" choice.
• option_2 mocks get_gcp_project_from_gcloud (no default project), as option_2_unset_project already does with its own value.
• A module-level autouse _no_real_gcloud fixture makes subprocess.run raise an AssertionError for any gcloud command. A future test that forgets a mock then fails loudly instead of touching the developer's machine. Tests that patch subprocess.run themselves (e.g. the unset_project and *_from_gcloud_fail tests) still override it.

Test-only change; no library code is touched.

Testing Plan

Unit Tests:

• I have added or updated unit tests for my change.
• All unit tests pass locally.

With the guard alone, without the two mocks, the guard names exactly the two offenders:

E       AssertionError: Test ran the real gcloud CLI: ['gcloud', 'config', 'get-value', 'project']
E       AssertionError: Test ran the real gcloud CLI: ['gcloud', 'auth', 'application-default', 'login']
FAILED ...::test_handle_login_with_google_option_2
FAILED ...::test_handle_login_with_google_option_3

With the fix, I put a logging fake gcloud first on PATH to catch anything that slips through:

$ pytest tests/unittests/cli
1620 passed, 5 skipped, 1 xfailed
fake gcloud calls: 0

test_cli_create.py drops from about 9.6s to 0.3s, since nothing waits on gcloud any more. pre-commit run passes on the changed file.

Manual End-to-End (E2E) Tests:

Before the fix, gcloud's own log (~/.config/gcloud/logs/) from running the suite showed the default project being unset, and a new ADC login on every run:

17.42.27 Running [gcloud.config.get-value] with arguments: [SECTION/PROPERTY: "project"]
17.42.27 Running [gcloud.config.unset] with arguments: [SECTION/PROPERTY: "project"]
17.42.37 Running [gcloud.auth.application-default.login] with arguments: []

After the fix, running the CLI tests adds no gcloud log entries.

Checklist

• I have read the CONTRIBUTING.md document.
• I have performed a self-review of my own code.
• I have commented my code, particularly in hard-to-understand areas.
• I have added tests that prove my fix is effective or that my feature works.
• New and existing unit tests pass locally with my changes.
• I have manually tested my changes end-to-end.
• Any dependent changes have been merged and published in downstream modules.

Additional context

None.