single.rb

control 'project-bindings' do
  projects.each do |project|
    describe command("gcloud projects get-iam-policy #{project} --format='json(bindings)'") do
      its('exit_status') { should eq 0 }
      its('stderr') { should eq '' }

      let(:members) do
        bindings = JSON.parse(subject.stdout, symbolize_names: true)[:bindings]
        bindings.find { |b| b[:'role'] ==  projectRoles[0] }[:members]
      end

      it { expect(members).to include(*memberGroups[0]) }
    end
  end
end