chemlab 0.0.1

data/qa/specs/features/ee/browser_ui/3_create/repository/restrict_push_protected_branch_spec.rb

@@ -0,0 +1,120 @@
+# frozen_string_literal: true
+
+module QA
+  context 'Create' do
+    describe 'Restricted protected branch push and merge' do
+      let(:user_developer) { Resource::User.fabricate_or_use(Runtime::Env.gitlab_qa_username_1, Runtime::Env.gitlab_qa_password_1) }
+      let(:user_maintainer) { Resource::User.fabricate_or_use(Runtime::Env.gitlab_qa_username_2, Runtime::Env.gitlab_qa_password_2) }
+      let(:branch_name) { 'protected-branch' }
+      let(:commit_message) { 'Protected push commit message' }
+
+      shared_examples 'only user with access pushes and merges' do
+        it 'unselected maintainer user fails to push' do
+          expect { push_new_file(branch_name, as_user: user_maintainer) }.to raise_error(
+            QA::Git::Repository::RepositoryCommandError,
+            /remote: GitLab: You are not allowed to push code to protected branches on this project\.([\s\S]+)\[remote rejected\] #{branch_name} -> #{branch_name} \(pre-receive hook declined\)/)
+        end
+
+        it 'selected developer user pushes and merges' do
+          push = push_new_file(branch_name, as_user: user_developer)
+
+          expect(push.output).to match(/remote: To create a merge request for protected-branch, visit/)
+
+          Resource::MergeRequest.fabricate_via_api! do |merge_request|
+            merge_request.project = project
+            merge_request.target_new_branch = false
+            merge_request.source_branch = branch_name
+            merge_request.no_preparation = true
+          end.visit!
+
+          Page::MergeRequest::Show.perform(&:merge!)
+
+          expect(page).to have_content('The changes were merged')
+        end
+      end
+
+      context 'when only one user is allowed to merge and push to a protected branch' do
+        let(:project) do
+          Resource::Project.fabricate_via_api! do |resource|
+            resource.name = 'user-with-access-to-protected-branch'
+            resource.initialize_with_readme = true
+          end
+        end
+
+        before do
+          project.add_member(user_developer, Resource::Members::AccessLevel::DEVELOPER)
+          project.add_member(user_maintainer, Resource::Members::AccessLevel::MAINTAINER)
+
+          login
+
+          Resource::ProtectedBranch.fabricate! do |protected_branch|
+            protected_branch.branch_name = branch_name
+            protected_branch.project = project
+            protected_branch.allowed_to_merge = {
+              users: [user_developer]
+            }
+            protected_branch.allowed_to_push = {
+              users: [user_developer]
+            }
+          end
+        end
+
+        it_behaves_like 'only user with access pushes and merges'
+      end
+
+      context 'when only one group is allowed to merge and push to a protected branch' do
+        let(:group) do
+          Resource::Group.fabricate_via_api! do |group|
+            group.path = "access-to-protected-branch-#{SecureRandom.hex(8)}"
+          end
+        end
+        let(:project) do
+          Resource::Project.fabricate_via_api! do |resource|
+            resource.name = 'group-with-access-to-protected-branch'
+            resource.initialize_with_readme = true
+          end
+        end
+
+        before do
+          login
+
+          group.add_member(user_developer, Resource::Members::AccessLevel::DEVELOPER)
+          project.share_with_group(group, Resource::Members::AccessLevel::DEVELOPER)
+
+          project.add_member(user_maintainer, Resource::Members::AccessLevel::MAINTAINER)
+
+          Resource::ProtectedBranch.fabricate! do |protected_branch|
+            protected_branch.branch_name = branch_name
+            protected_branch.project = project
+            protected_branch.allowed_to_merge = {
+              groups: [group]
+            }
+            protected_branch.allowed_to_push = {
+              groups: [group]
+            }
+          end
+        end
+
+        it_behaves_like 'only user with access pushes and merges'
+      end
+
+      def login(as_user: Runtime::User)
+        Page::Main::Menu.perform(&:sign_out_if_signed_in)
+
+        Runtime::Browser.visit(:gitlab, Page::Main::Login)
+        Page::Main::Login.perform do |login|
+          login.sign_in_using_credentials(user: as_user)
+        end
+      end
+
+      def push_new_file(branch, as_user: user)
+        Resource::Repository::Push.fabricate! do |push|
+          push.repository_http_uri = project.repository_http_location.uri
+          push.branch_name = branch_name
+          push.new_branch = false
+          push.user = as_user
+        end
+      end
+    end
+  end
+end

data/qa/specs/features/ee/browser_ui/3_create/web_ide/web_terminal_spec.rb

@@ -0,0 +1,80 @@
+# frozen_string_literal: true
+
+module QA
+  # This test was quarantined because relative URL isn't supported
+  # See https://gitlab.com/gitlab-org/gitlab/issues/13833
+  context 'Create', :runner, :quarantine do
+    describe 'Web IDE web terminal', :docker do
+      before do
+        project = Resource::Project.fabricate_via_api! do |project|
+          project.name = 'web-terminal-project'
+        end
+
+        Resource::Repository::Commit.fabricate_via_api! do |commit|
+          commit.project = project
+          commit.commit_message = 'Add .gitlab/.gitlab-webide.yml'
+          commit.add_files(
+            [
+              {
+                file_path: '.gitlab/.gitlab-webide.yml',
+                content: <<~YAML
+                  terminal:
+                    tags: ["web-ide"]
+                    script: sleep 60
+                YAML
+              }
+            ]
+          )
+        end
+
+        @runner = Resource::Runner.fabricate_via_api! do |runner|
+          runner.project = project
+          runner.name = "qa-runner-#{Time.now.to_i}"
+          runner.tags = %w[web-ide]
+          runner.image = 'gitlab/gitlab-runner:latest'
+          runner.config = <<~END
+            concurrent = 1
+
+            [session_server]
+              listen_address = "0.0.0.0:8093"
+              advertise_address = "localhost:8093"
+              session_timeout = 120
+          END
+        end
+
+        Flow::Login.sign_in
+
+        project.visit!
+      end
+
+      after do
+        @runner.remove_via_api! if @runner
+      end
+
+      it 'user starts the web terminal' do
+        Page::Project::Show.perform(&:open_web_ide!)
+
+        # Start the web terminal and check that there were no errors
+        # The terminal screen is a canvas element, so we can't read its content,
+        # so we infer that it's working if:
+        #  a) The terminal JS package has loaded, and
+        #  b) It's not stuck in a "Loading/Starting" state, and
+        #  c) There's no alert stating there was a problem
+        #
+        # The terminal itself is a third-party package so we assume it is
+        # adequately tested elsewhere.
+        #
+        # There are also FE specs
+        # * ee/spec/javascripts/ide/components/terminal/terminal_spec.js
+        # * ee/spec/frontend/ide/components/terminal/terminal_controls_spec.js
+        Page::Project::WebIDE::Edit.perform do |edit|
+          edit.start_web_terminal
+
+          expect(edit).to have_no_alert
+          expect(edit).to have_finished_loading
+          expect(edit).to have_terminal_screen
+        end
+      end
+    end
+  end
+end

data/qa/specs/features/ee/browser_ui/5_package/maven_repository_spec.rb

@@ -0,0 +1,102 @@
+# frozen_string_literal: true
+
+module QA
+  context 'Package', :docker, :orchestrated, :packages do
+    describe 'Maven Repository' do
+      include Runtime::Fixtures
+
+      let(:group_id) { 'com.gitlab.qa' }
+      let(:artifact_id) { 'maven' }
+      let(:package_name) { "#{group_id}/#{artifact_id}".tr('.', '/') }
+      let(:auth_token) do
+        unless Page::Main::Menu.perform(&:signed_in?)
+          Flow::Login.sign_in
+        end
+
+        Resource::PersonalAccessToken.fabricate!.access_token
+      end
+      let(:project) do
+        Resource::Project.fabricate_via_api! do |project|
+          project.name = 'maven-package-project'
+        end
+      end
+
+      it 'publishes a maven package and deletes it' do
+        uri = URI.parse(Runtime::Scenario.gitlab_address)
+        gitlab_address_with_port = "#{uri.scheme}://#{uri.host}:#{uri.port}"
+        pom_xml = {
+          file_path: 'pom.xml',
+          content: <<~XML
+            <project>
+              <groupId>#{group_id}</groupId>
+              <artifactId>#{artifact_id}</artifactId>
+              <version>1.0</version>
+              <modelVersion>4.0.0</modelVersion>
+              <repositories>
+                <repository>
+                  <id>#{project.name}</id>
+                  <url>#{gitlab_address_with_port}/api/v4/projects/#{project.id}/packages/maven</url>
+                </repository>
+              </repositories>
+              <distributionManagement>
+                <repository>
+                  <id>#{project.name}</id>
+                  <url>#{gitlab_address_with_port}/api/v4/projects/#{project.id}/packages/maven</url>
+                </repository>
+                <snapshotRepository>
+                  <id>#{project.name}</id>
+                  <url>#{gitlab_address_with_port}/api/v4/projects/#{project.id}/packages/maven</url>
+                </snapshotRepository>
+              </distributionManagement>
+            </project>
+          XML
+        }
+        settings_xml = {
+          file_path: 'settings.xml',
+          content: <<~XML
+          <settings xmlns="http://maven.apache.org/SETTINGS/1.1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+          xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.1.0 http://maven.apache.org/xsd/settings-1.1.0.xsd">
+            <servers>
+              <server>
+                <id>#{project.name}</id>
+                <configuration>
+                  <httpHeaders>
+                    <property>
+                      <name>Private-Token</name>
+                      <value>#{auth_token}</value>
+                    </property>
+                  </httpHeaders>
+                </configuration>
+              </server>
+            </servers>
+          </settings>
+          XML
+        }
+
+        # Use a maven docker container to deploy the package
+        with_fixtures([pom_xml, settings_xml]) do |dir|
+          Service::DockerRun::Maven.new(dir).publish!
+        end
+
+        project.visit!
+        Page::Project::Menu.perform(&:click_packages_link)
+        EE::Page::Project::Packages::Index.perform do |index|
+          expect(index).to have_package(package_name)
+
+          index.click_package(package_name)
+        end
+
+        EE::Page::Project::Packages::Show.perform do |show|
+          expect(show).to have_package_info(package_name, "1.0")
+
+          show.click_delete
+        end
+
+        EE::Page::Project::Packages::Index.perform do |index|
+          expect(index).to have_content("Package was removed")
+          expect(index).to have_no_package(package_name)
+        end
+      end
+    end
+  end
+end

data/qa/specs/features/ee/browser_ui/5_package/npm_registry_spec.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+module QA
+  context 'Package', :docker, :orchestrated, :packages do
+    describe 'NPM registry' do
+      include Runtime::Fixtures
+
+      let(:registry_scope) { project.group.sandbox.path }
+      let(:package_name) { "@#{registry_scope}/#{project.name}" }
+      let(:auth_token) do
+        unless Page::Main::Menu.perform(&:signed_in?)
+          Flow::Login.sign_in
+        end
+
+        Resource::PersonalAccessToken.fabricate!.access_token
+      end
+      let(:project) do
+        Resource::Project.fabricate_via_api! do |project|
+          project.name = 'npm-registry-project'
+        end
+      end
+
+      it 'publishes an npm package and then deletes it' do
+        uri = URI.parse(Runtime::Scenario.gitlab_address)
+        gitlab_host_with_port = "#{uri.host}:#{uri.port}"
+        gitlab_address_with_port = "#{uri.scheme}://#{uri.host}:#{uri.port}"
+        package_json = {
+          file_path: 'package.json',
+          content: <<~JSON
+            {
+              "name": "#{package_name}",
+              "version": "1.0.0",
+              "description": "Example package for GitLab NPM registry",
+              "publishConfig": {
+                "@#{registry_scope}:registry": "#{gitlab_address_with_port}/api/v4/projects/#{project.id}/packages/npm/"
+              }
+            }
+          JSON
+        }
+        npmrc = {
+          file_path: '.npmrc',
+          content: <<~NPMRC
+            //#{gitlab_host_with_port}/api/v4/projects/#{project.id}/packages/npm/:_authToken=#{auth_token}
+            //#{gitlab_host_with_port}/api/v4/packages/npm/:_authToken=#{auth_token}
+            @#{registry_scope}:registry=#{gitlab_address_with_port}/api/v4/packages/npm/
+          NPMRC
+        }
+
+        # Use a node docker container to publish the package
+        with_fixtures([npmrc, package_json]) do |dir|
+          Service::DockerRun::NodeJs.new(dir).publish!
+        end
+
+        project.visit!
+        Page::Project::Menu.perform(&:click_packages_link)
+        EE::Page::Project::Packages::Index.perform do |index|
+          expect(index).to have_package(package_name)
+
+          index.click_package(package_name)
+        end
+
+        EE::Page::Project::Packages::Show.perform do |show|
+          expect(show).to have_package_info(package_name, "1.0.0")
+
+          show.click_delete
+        end
+
+        EE::Page::Project::Packages::Index.perform do |index|
+          expect(index).to have_content("Package was removed")
+          expect(index).to have_no_package(package_name)
+        end
+      end
+    end
+  end
+end

data/qa/specs/features/ee/browser_ui/6_release/multi-project_pipelines_spec.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+require 'securerandom'
+
+module QA
+  context 'Release', :docker do
+    describe 'Multi-project pipelines' do
+      let(:upstream_project_name) { "upstream-project-#{SecureRandom.hex(8)}" }
+      let(:downstream_project_name) { "downstream-project-#{SecureRandom.hex(8)}" }
+      let(:upstream_project) do
+        Resource::Project.fabricate_via_api! do |project|
+          project.name = upstream_project_name
+        end
+      end
+      let(:downstream_project) do
+        Resource::Project.fabricate_via_api! do |project|
+          project.name = downstream_project_name
+        end
+      end
+      let!(:runner) do
+        Resource::Runner.fabricate_via_api! do |runner|
+          runner.project = upstream_project
+          runner.token = upstream_project.group.sandbox.runners_token
+          runner.name = upstream_project_name
+          runner.tags = [upstream_project_name]
+        end
+      end
+
+      before do
+        Resource::Repository::ProjectPush.fabricate! do |project_push|
+          project_push.project = upstream_project
+          project_push.file_name = '.gitlab-ci.yml'
+          project_push.commit_message = 'Add .gitlab-ci.yml'
+          project_push.file_content = <<~CI
+            stages:
+             - test
+             - deploy
+
+            job1:
+              stage: test
+              tags: ["#{upstream_project_name}"]
+              script: echo "done"
+
+            staging:
+              stage: deploy
+              trigger:
+                project: #{downstream_project.path_with_namespace}
+                strategy: depend
+          CI
+        end
+
+        Resource::Repository::ProjectPush.fabricate! do |project_push|
+          project_push.project = downstream_project
+          project_push.file_name = '.gitlab-ci.yml'
+          project_push.commit_message = 'Add .gitlab-ci.yml'
+          project_push.file_content = <<~CI
+            downstream_job:
+              stage: test
+              tags: ["#{upstream_project_name}"]
+              script: echo "done"
+          CI
+        end
+
+        Flow::Login.sign_in
+
+        Resource::MergeRequest.fabricate_via_api! do |merge_request|
+          merge_request.project = upstream_project
+          merge_request.target_new_branch = false
+        end.visit!
+      end
+
+      after do
+        runner.remove_via_api!
+      end
+
+      it 'creates a multi-project pipeline' do
+        Page::MergeRequest::Show.perform do |show|
+          pipeline_passed = show.retry_until(reload: true, max_attempts: 20, sleep_interval: 6) do
+            show.has_content?(/Pipeline #\d+ passed/)
+          end
+
+          expect(pipeline_passed).to be_truthy, "The pipeline did not pass."
+
+          show.click_pipeline_link
+        end
+
+        Page::Project::Pipeline::Show.perform do |show|
+          expect(show).to have_passed
+          expect(show).to have_no_job("downstream_job")
+
+          show.click_linked_job(downstream_project_name)
+
+          expect(show).to have_job("downstream_job")
+        end
+      end
+    end
+  end
+end