chemlab 0.0.1

data/qa/specs/features/ee/api/geo/geo_nodes_spec.rb

@@ -0,0 +1,91 @@
+# frozen_string_literal: true
+
+module QA
+  context 'Geo', :orchestrated, :geo do
+    describe 'Geo Nodes API' do
+      before(:all) do
+        get_personal_access_token
+      end
+
+      shared_examples 'retrieving configuration about Geo nodes' do
+        it 'GET /geo_nodes' do
+          get api_endpoint('/geo_nodes')
+
+          expect_status(200)
+          expect(json_body.size).to be >= 2
+          expect_json('?', primary: true)
+          expect_json_types('*', primary: :boolean, current: :boolean,
+                                 files_max_capacity: :integer, repos_max_capacity: :integer,
+                                 clone_protocol: :string, _links: :object)
+        end
+
+        it 'GET /geo_nodes/:id' do
+          get api_endpoint("/geo_nodes/#{geo_node[:id]}")
+
+          expect_status(200)
+          expect(json_body).to eq geo_node
+        end
+      end
+
+      describe 'Geo Nodes API on primary node', :geo do
+        before(:context) do
+          fetch_nodes(:geo_primary)
+        end
+
+        include_examples 'retrieving configuration about Geo nodes' do
+          let(:geo_node) { @primary_node }
+        end
+
+        describe 'editing a Geo node' do
+          it 'PUT /geo_nodes/:id for secondary node' do
+            endpoint = api_endpoint("/geo_nodes/#{@secondary_node[:id]}")
+            new_attributes = { enabled: false, files_max_capacity: 1000, repos_max_capacity: 2000 }
+
+            put endpoint, new_attributes
+
+            expect_status(200)
+            expect_json(new_attributes)
+
+            # restore the original values
+            put endpoint, { enabled: @secondary_node[:enabled],
+                            files_max_capacity: @secondary_node[:files_max_capacity],
+                            repos_max_capacity: @secondary_node[:repos_max_capacity] }
+
+            expect_status(200)
+          end
+        end
+      end
+
+      describe 'Geo Nodes API on secondary node', :geo do
+        before(:context) do
+          fetch_nodes(:geo_secondary)
+        end
+
+        include_examples 'retrieving configuration about Geo nodes' do
+          let(:geo_node) { @nodes.first }
+        end
+      end
+
+      def api_endpoint(endpoint)
+        QA::Runtime::API::Request.new(@api_client, endpoint).url
+      end
+
+      def fetch_nodes(node_type)
+        @api_client = Runtime::API::Client.new(node_type, personal_access_token: @personal_access_token)
+
+        get api_endpoint('/geo_nodes')
+
+        @nodes          = json_body
+        @primary_node   = @nodes.detect { |node| node[:primary] == true }
+        @secondary_node = @nodes.detect { |node| node[:primary] == false }
+      end
+
+      # go to the primary and create a personal_access_token, which will be used
+      # for accessing both the primary and secondary
+      def get_personal_access_token
+        api_client = Runtime::API::Client.new(:geo_primary)
+        @personal_access_token = api_client.personal_access_token
+      end
+    end
+  end
+end

data/qa/specs/features/ee/browser_ui/1_manage/group/group_audit_logs_1_spec.rb

@@ -0,0 +1,155 @@
+# frozen_string_literal: true
+require 'securerandom'
+
+module QA
+  context 'Manage' do
+    include Support::Api
+
+    let(:api_client) { Runtime::API::Client.new(:gitlab) }
+
+    shared_examples 'audit event' do |expected_events|
+      it 'logs audit events for UI operations' do
+        wait_for_audit_events(expected_events, group)
+
+        Page::Group::Menu.perform(&:go_to_audit_events_settings)
+        expected_events.each do |expected_event|
+          # Sometimes the audit logs are not displayed in the UI
+          # right away so a refresh may be needed.
+          # https://gitlab.com/gitlab-org/gitlab/issues/119203
+          # TODO: https://gitlab.com/gitlab-org/gitlab/issues/195424
+          Support::Retrier.retry_on_exception(reload_page: page) do
+            expect(page).to have_text(expected_event)
+          end
+        end
+      end
+    end
+
+    describe 'Group' do
+      before(:all) do
+        @group = Resource::Group.fabricate_via_api! do |resource|
+          resource.path = "test-group-#{SecureRandom.hex(8)}"
+        end
+      end
+
+      before do
+        @event_count = get_audit_event_count(@group)
+      end
+
+      let(:project) do
+        Resource::Project.fabricate_via_api! do |resource|
+          resource.name = 'project-shared-with-group'
+        end
+      end
+
+      let(:user) { Resource::User.fabricate_or_use(Runtime::Env.gitlab_qa_username_1, Runtime::Env.gitlab_qa_password_1) }
+      let(:group) { @group }
+
+      context 'Add group' do
+        let(:group_name) { 'new group' }
+
+        before do
+          @event_count = 0
+          sign_in
+          Resource::Group.fabricate_via_browser_ui! do |group|
+            group.name = group_name
+          end.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+        end
+
+        it_behaves_like 'audit event', ['Add group'] do
+          let(:group) do
+            Resource::Group.fabricate_via_api! do |group|
+              group.name = group_name
+            end
+          end
+        end
+      end
+
+      context 'Change repository size limit', :requires_admin do
+        before do
+          sign_in(as_admin: true)
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform do |settings|
+            settings.set_repository_size_limit(100)
+            settings.click_save_name_visibility_settings_button
+          end
+        end
+        it_behaves_like 'audit event', ['Change repository size limit']
+      end
+
+      context 'Update group name' do
+        before do
+          sign_in
+          @group.visit!
+          updated_group_name = "#{@group.path}-updated"
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform do |settings|
+            settings.set_group_name(updated_group_name)
+            settings.click_save_name_visibility_settings_button
+          end
+        end
+
+        it_behaves_like 'audit event', ['Change name']
+      end
+
+      context 'Add user, change access level, remove user' do
+        before do
+          sign_in
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_members_item)
+          Page::Group::SubMenus::Members.perform do |members_page|
+            members_page.add_member(user.username)
+            members_page.update_access_level(user.username, "Developer")
+            members_page.remove_member(user.username)
+          end
+        end
+
+        it_behaves_like 'audit event', ['Add user access as guest', 'Change access level', 'Remove user access']
+      end
+
+      context 'Add and remove project access' do
+        before do
+          sign_in
+          project.visit!
+
+          Page::Project::Menu.perform(&:go_to_members_settings)
+          Page::Project::Settings::Members.perform do |members|
+            members.invite_group(@group.path)
+          end
+
+          Page::Project::Menu.perform(&:go_to_members_settings)
+          Page::Project::Settings::Members.perform do |members|
+            members.remove_group(@group.path)
+          end
+
+          @group.visit!
+        end
+
+        it_behaves_like 'audit event', ['Add project access', 'Remove project access']
+      end
+    end
+
+    def sign_in(as_admin: false)
+      unless Page::Main::Menu.perform(&:signed_in?)
+        Runtime::Browser.visit(:gitlab, Page::Main::Login)
+        Page::Main::Login.perform do |login|
+          as_admin ? login.sign_in_using_admin_credentials : login.sign_in_using_credentials
+        end
+      end
+    end
+
+    def get_audit_event_count(group)
+      response = get Runtime::API::Request.new(api_client, "/groups/#{group.id}/audit_events").url
+      parse_body(response).length
+    end
+
+    def wait_for_audit_events(expected_events, group)
+      new_event_count = @event_count + expected_events.length
+
+      Support::Retrier.retry_until(max_duration: QA::Support::Repeater::DEFAULT_MAX_WAIT_TIME, sleep_interval: 1) do
+        get_audit_event_count(group) == new_event_count
+      end
+    end
+  end
+end

data/qa/specs/features/ee/browser_ui/1_manage/group/group_audit_logs_2_spec.rb

@@ -0,0 +1,103 @@
+# frozen_string_literal: true
+require 'securerandom'
+
+module QA
+  context 'Manage' do
+    shared_examples 'audit event' do |expected_events|
+      it 'logs audit events for UI operations' do
+        Page::Group::Menu.perform(&:go_to_audit_events_settings)
+        expected_events.each do |expected_event|
+          expect(page).to have_text(expected_event)
+        end
+      end
+    end
+
+    describe 'Group' do
+      before(:all) do
+        @group = Resource::Group.fabricate_via_api! do |resource|
+          resource.path = "test-group-#{SecureRandom.hex(8)}"
+        end
+      end
+
+      # Bug issue: https://gitlab.com/gitlab-org/gitlab/issues/14756
+      context 'Disable and Enable LFS', :skip do
+        before do
+          sign_in
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform(&:set_lfs_disabled)
+
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform(&:set_lfs_enabled)
+        end
+
+        it_behaves_like 'audit event', ["Change lfs enabled from false to true", "Change lfs enabled from true to false"]
+      end
+
+      context 'Enable and disable LFS' do
+        before do
+          sign_in
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform(&:set_membership_lock_enabled)
+
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform(&:set_membership_lock_disabled)
+        end
+
+        it_behaves_like 'audit event', ["Change membership lock from true to false", "Change membership lock from false to true"]
+      end
+
+      context 'Enable and disable allow user request access' do
+        before do
+          sign_in
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform(&:toggle_request_access)
+
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform(&:toggle_request_access)
+        end
+
+        it_behaves_like 'audit event', ["Change request access enabled from true to false", "Change request access enabled from false to true"]
+      end
+
+      # Bug issue: https://gitlab.com/gitlab-org/gitlab/issues/31764
+      context 'Enable and disable 2FA requirement', :skip do
+        before do
+          sign_in
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform(&:set_require_2fa_enabled)
+          Page::Profile::TwoFactorAuth.perform(&:click_configure_it_later_button)
+
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform(&:set_require_2fa_disabled)
+        end
+
+        it_behaves_like 'audit event', ["Change require two factor authentication from true to false", "Change require two factor authentication from false to true"]
+      end
+
+      context 'Change project creation level' do
+        before do
+          sign_in
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+          Page::Group::Settings::General.perform do |settings|
+            settings.set_project_creation_level("Maintainers")
+          end
+        end
+
+        it_behaves_like 'audit event', ["Change project creation level"]
+      end
+    end
+
+    def sign_in
+      unless Page::Main::Menu.perform { |p| p.has_personal_area?(wait: 0) }
+        Runtime::Browser.visit(:gitlab, Page::Main::Login)
+        Page::Main::Login.perform(&:sign_in_using_credentials)
+      end
+    end
+  end
+end

data/qa/specs/features/ee/browser_ui/1_manage/group/group_file_template_spec.rb

@@ -0,0 +1,141 @@
+# frozen_string_literal: true
+
+module QA
+  context 'Manage' do
+    describe 'Group file templates', :requires_admin do
+      include Support::Api
+
+      templates = [
+        {
+          type: 'Dockerfile',
+          template: 'custom_dockerfile',
+          file_path: 'Dockerfile/custom_dockerfile.dockerfile',
+          content: 'dockerfile template test'
+        },
+        {
+          type: '.gitignore',
+          template: 'custom_gitignore',
+          file_path: 'gitignore/custom_gitignore.gitignore',
+          content: 'gitignore template test'
+        },
+        {
+          type: '.gitlab-ci.yml',
+          template: 'custom_gitlab-ci',
+          file_path: 'gitlab-ci/custom_gitlab-ci.yml',
+          content:
+            <<~CI
+              job:
+                script: echo "Skipped"
+                except:
+                  - master
+            CI
+        },
+        {
+          type: 'LICENSE',
+          template: 'custom_license',
+          file_path: 'LICENSE/custom_license.txt',
+          content: 'license template test'
+        }
+      ]
+
+      before(:all) do
+        admin = QA::Resource::User.new.tap do |user|
+          user.username = QA::Runtime::User.admin_username
+          user.password = QA::Runtime::User.admin_password
+        end
+        @api_client = Runtime::API::Client.new(:gitlab, user: admin)
+        @api_client.personal_access_token
+
+        @group = Resource::Group.fabricate_via_api! do |group|
+          group.path = 'template-group'
+          group.user = admin
+          group.api_client = @api_client
+        end
+
+        @file_template_project = Resource::Project.fabricate_via_api! do |project|
+          project.group = @group
+          project.name = 'group-file-template-project'
+          project.description = 'Add group file templates'
+          project.auto_devops_enabled = false
+          project.initialize_with_readme = true
+          project.user = admin
+          project.api_client = @api_client
+        end
+
+        Resource::Repository::Commit.fabricate_via_api! do |commit|
+          commit.project = @file_template_project
+          commit.commit_message = 'Add group file templates'
+          commit.add_files(templates)
+          commit.user = admin
+          commit.api_client = @api_client
+        end
+
+        @project = Resource::Project.fabricate_via_api! do |project|
+          project.group = @group
+          project.name = 'group-file-template-project-2'
+          project.description = 'Add files for group file templates'
+          project.auto_devops_enabled = false
+          project.initialize_with_readme = true
+          project.user = admin
+          project.api_client = @api_client
+        end
+      end
+
+      after(:all) do
+        Flow::Login.while_signed_in_as_admin do
+          remove_group_file_template_if_set
+        end
+      end
+
+      templates.each do |template|
+        it "creates file via custom #{template[:type]} file template" do
+          Flow::Login.sign_in_as_admin
+
+          set_file_template_if_not_already_set
+
+          @project.visit!
+
+          Page::Project::Show.perform(&:create_new_file!)
+          Page::File::Form.perform do |form|
+            form.select_template template[:type], template[:template]
+
+            expect(form).to have_normalized_ws_text(template[:content])
+
+            form.commit_changes
+            form.finished_loading?
+
+            aggregate_failures "indications of file created" do
+              expect(form).to have_content('The file has been successfully created.')
+              expect(form).to have_content(template[:type])
+              expect(form).to have_content('Add new file')
+              expect(form).to have_normalized_ws_text(template[:content].chomp)
+            end
+          end
+        end
+      end
+
+      def set_file_template_if_not_already_set
+        response = get Runtime::API::Request.new(@api_client, "/groups/#{@group.id}").url
+
+        if parse_body(response)[:file_template_project_id]
+          return
+        else
+          @group.visit!
+          Page::Group::Menu.perform(&:click_group_general_settings_item)
+
+          Page::Group::Settings::General.perform do |general|
+            general.choose_file_template_repository(@file_template_project.name)
+          end
+        end
+      end
+
+      def remove_group_file_template_if_set
+        response = get Runtime::API::Request.new(@api_client, "/groups/#{@group.id}").url
+
+        if parse_body(response)[:file_template_project_id]
+          put Runtime::API::Request.new(@api_client, "/groups/#{@group.id}").url, { file_template_project_id: nil }
+        end
+      end
+    end
+  end
+end