test(e2e): Add check for vault worker filters (#3859)

testing/internal/e2e/tests/base_with_worker/target_tcp_worker_connect_ssh_test.go

@@ -115,6 +115,17 @@ func TestCliTcpTargetWorkerConnectTarget(t *testing.T) {
 	newCredentialLibraryId := newCredentialLibraryResult.Item.Id
 	t.Logf("Created Credential Library: %s", newCredentialLibraryId)
 
+	// Try to set a worker filter on a vault credential-store
+	output = e2e.RunCommand(ctx, "boundary",
+		e2e.WithArgs(
+			"credential-stores", "update", "vault",
+			"-id", newCredentialStoreId,
+			"worker-filter", fmt.Sprintf(`"%s" in "/tags/type"`, c.WorkerTagEgress),
+		),
+	)
+	require.Error(t, output.Err)
+	require.Equal(t, 1, output.ExitCode)
+
 	// Create a target
 	newTargetId := boundary.CreateNewTargetCli(
 		t,