gitlab-qa 2.7.1 → 2.7.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4904d31a513567678eb38f85db9f8cad2724e833f8ced5205b0686604f51ac1d
-  data.tar.gz: b702f0f1894ff3ada2d662ac10de61cc6848f22e2cdc5c1ab97bde4568cc2f00
+  metadata.gz: 0d7aaedea31a9632f594c691505554832867b171ecde5819c07129d5bf570295
+  data.tar.gz: 6b58cb3fc6cfcfebd0a710c1560dfa9ff2518864ea75d4cef1bd3c18594af6ca
 SHA512:
-  metadata.gz: c950dfc7c05c7d788d36f074bf4c1e1cbc1d751a8204c298096864fa2b350ef7552df56ae82f10df88a412a2d325abbbf73faadcd8f59375dadb400618e1c94a
-  data.tar.gz: a4182a1d875736230a2113aed7f51a322341c7ab99b849971ab31a014b230ec9c93b1856563380ed54c1e37ee9ddac372053341078de35971370d36d286e5922
+  metadata.gz: 66d39acd655809376983c4a6c873424465b7a2d8c86b716a0a19037fcdc7f485cf5421908a91d00f676038685c9d995143b209711873d63c5fc4ee1a929b0e02
+  data.tar.gz: 6f4e36562403dd497d758cd52399e6f6e05fb003b1358a09d55e1f73ded754dfc540b183b2b90feca594cf6c070a582339b8fd368d39ef0fa1de602a0f19bf71

data/.gitlab-ci.yml

@@ -172,16 +172,30 @@ ee:geo:
   <<: *high-capacity
   <<: *ee-qa
 
-ce:ldap:
+ce:ldap_no_tls:
   script:
-    - bin/qa Test::Integration::LDAP ${RELEASE:=CE}
+    - bin/qa Test::Integration::LDAPNoTLS ${RELEASE:=CE}
   <<: *test
   <<: *high-capacity
   <<: *ce-qa
 
-ee:ldap:
+ee:ldap_no_tls:
   script:
-    - bin/qa Test::Integration::LDAP ${RELEASE:=EE}
+    - bin/qa Test::Integration::LDAPNoTLS ${RELEASE:=EE}
+  <<: *test
+  <<: *high-capacity
+  <<: *ee-qa
+
+ce:ldap_tls:
+  script:
+    - bin/qa Test::Integration::LDAPTLS ${RELEASE:=CE}
+  <<: *test
+  <<: *high-capacity
+  <<: *ce-qa
+
+ee:ldap_tls:
+  script:
+    - bin/qa Test::Integration::LDAPTLS ${RELEASE:=EE}
   <<: *test
   <<: *high-capacity
   <<: *ee-qa
@@ -198,7 +212,7 @@ ee:instance_saml:
   - bin/qa Test::Integration::InstanceSAML ${RELEASE:=EE}
   <<: *test
   <<: *high-capacity
-  <<: *ee-qa  
+  <<: *ee-qa
 
 ee:group_saml:
   script:

data/docs/what_tests_can_be_run.md

@@ -148,18 +148,18 @@ $ gitlab-qa Test::Integration::Geo EE
 
 [test-geo]: https://gitlab.com/gitlab-org/gitlab-ee/blob/master/qa/qa/ee/scenario/test/geo.rb
 
-### `Test::Integration::LDAP CE|EE|<full image address>`
+### `Test::Integration::LDAPNoTLS CE|EE|<full image address>`
 
 This tests that a GitLab instance works as expected with an external
-LDAP server.
+LDAP server with TLS not enabled.
 
 The scenario spins up an OpenLDAP server, seeds users, and verifies
 that LDAP-related features work as expected.
 
 To run tests against the GitLab containers, a GitLab QA (`gitlab/gitlab-qa`)
 container is spun up and tests are run from it by running the
-`Test::Integration::LDAP` scenario (located under
-[`gitlab-org/gitlab-ce@qa/qa/scenario/test/integration/ldap.rb`][test-integration-ldap]
+`Test::Integration::LDAPNoTLS` scenario (located under
+[`gitlab-org/gitlab-ce@qa/qa/scenario/test/integration/ldap_no_tls.rb`][test-integration-ldap-no-tls]
 in the GitLab CE project).
 
 In EE, both the GitLab standard and LDAP credentials are needed:
@@ -174,15 +174,57 @@ In EE, both the GitLab standard and LDAP credentials are needed:
 Example:
 
 ```
-$ gitlab-qa Test::Integration::LDAP CE
+$ gitlab-qa Test::Integration::LDAPNoTLS CE
 
 # For EE
 $ export EE_LICENSE=$(cat /path/to/Geo.gitlab_license)
 
-$ gitlab-qa Test::Integration::LDAP EE
+$ gitlab-qa Test::Integration::LDAPNoTLS EE
 ```
 
-[test-integration-ldap]: https://gitlab.com/gitlab-org/gitlab-ce/blob/master/qa/qa/scenario/test/integration/ldap.rb
+[test-integration-ldap-no-tls]: https://gitlab.com/gitlab-org/gitlab-ce/blob/master/qa/qa/scenario/test/integration/ldap_no_tls.rb
+
+### `Test::Integration::LDAPTLS CE|EE|<full image address>`
+
+This tests that a TLS enabled GitLab instance works as expected with an external TLS enabled LDAP server. 
+The self signed TLS certificate used for the Gitlab instance and the private key is located at: [`gitlab-org/gitlab-qa@tls_certificates/gitlab`][test-integration-ldap-tls-certs]
+
+The certificate was generated with openssl using this command:
+```
+openssl req -x509 -newkey rsa:4096 -keyout gitlab.test.key -out gitlab.test.crt -days 3650 -nodes -subj "/C=US/ST=CA/L=San Francisco/O=GitLab/OU=Org/CN=gitlab.test"
+```
+
+The scenario spins up a TLS enabled OpenLDAP server, seeds users, and verifies
+that LDAP-related features work as expected.
+
+To run tests against the GitLab containers, a GitLab QA (`gitlab/gitlab-qa`)
+container is spun up and tests are run from it by running the
+`Test::Integration::LDAPTLS` scenario (located under
+[`gitlab-org/gitlab-ce@qa/qa/scenario/test/integration/ldap_tls.rb`][test-integration-ldap-tls]
+in the GitLab CE project).
+
+In EE, both the GitLab standard and LDAP credentials are needed:
+
+1. The first is used to login as an Admin to enter in the EE license.
+2. The second is used to conduct LDAP-related tasks
+
+**Required environment variables:**
+
+- [For EE only] `EE_LICENSE`: A valid EE license.
+
+Example:
+
+```
+$ gitlab-qa Test::Integration::LDAPTLS CE
+
+# For EE
+$ export EE_LICENSE=$(cat /path/to/Geo.gitlab_license)
+
+$ gitlab-qa Test::Integration::LDAPTLS EE
+```
+
+[test-integration-ldap-tls]: https://gitlab.com/gitlab-org/gitlab-ce/blob/master/qa/qa/scenario/test/integration/ldap_tls.rb
+[test-integration-ldap-tls-certs]: https://gitlab.com/gitlab-org/gitlab-ce/blob/master/tls_certificates/gitlab
 
 ### `Test::Integration::GroupSAML EE|<full image address>`
 

data/lib/gitlab/qa.rb

@@ -30,6 +30,8 @@ module Gitlab
         module Integration
           autoload :Geo, 'qa/scenario/test/integration/geo'
           autoload :LDAP, 'qa/scenario/test/integration/ldap'
+          autoload :LDAPNoTLS, 'qa/scenario/test/integration/ldap_no_tls'
+          autoload :LDAPTLS, 'qa/scenario/test/integration/ldap_tls'
           autoload :SAML, 'qa/scenario/test/integration/saml'
           autoload :GroupSAML, 'qa/scenario/test/integration/group_saml'
           autoload :InstanceSAML, 'qa/scenario/test/integration/instance_saml'

data/lib/gitlab/qa/component/gitlab.rb

@@ -11,17 +11,22 @@ module Gitlab
         include Scenario::Actable
 
         attr_reader :release, :docker
-        attr_accessor :volumes, :network, :environment
+        attr_accessor :volumes, :network, :environment, :tls
         attr_writer :name, :relative_path, :exec_commands
 
         def_delegators :release, :tag, :image, :edition
 
+        CERTIFICATES_PATH = File.expand_path('../../../../tls_certificates/gitlab'.freeze, __dir__)
+        SSL_PATH = '/etc/gitlab/ssl'.freeze
+
         def initialize
           @docker = Docker::Engine.new
           @environment = {}
           @volumes = {}
           @network_aliases = []
 
+          @volumes[CERTIFICATES_PATH] = SSL_PATH
+
           self.release = 'CE'
           self.exec_commands = []
         end
@@ -43,7 +48,15 @@ module Gitlab
         end
 
         def address
-          "http://#{hostname}#{relative_path}"
+          "#{scheme}://#{hostname}#{relative_path}"
+        end
+
+        def scheme
+          tls ? 'https' : 'http'
+        end
+
+        def port
+          tls ? '443' : '80'
         end
 
         def hostname
@@ -80,7 +93,7 @@ module Gitlab
           ensure_configured!
 
           docker.run(image, tag) do |command|
-            command << '-d -p 80'
+            command << "-d -p #{port}"
             command << "--name #{name}"
             command << "--net #{network}"
             command << "--hostname #{hostname}"
@@ -122,7 +135,7 @@ module Gitlab
         end
 
         def wait
-          if Availability.new(name, relative_path: relative_path).check(180)
+          if Availability.new(name, relative_path: relative_path, scheme: scheme, protocol_port: port.to_i).check(180)
             sleep 12 # TODO, handle that better
             puts ' -> GitLab is available.'
           else
@@ -157,13 +170,13 @@ module Gitlab
         end
 
         class Availability
-          def initialize(name, relative_path: '')
+          def initialize(name, relative_path: '', scheme: 'http', protocol_port: 80)
             @docker = Docker::Engine.new
 
             host = @docker.hostname
-            port = @docker.port(name, 80).split(':').last
+            port = @docker.port(name, protocol_port).split(':').last
 
-            @uri = URI.join("http://#{host}:#{port}", "#{relative_path}/", 'help')
+            @uri = URI.join("#{scheme}://#{host}:#{port}", "#{relative_path}/", 'help')
           end
 
           def check(retries)
@@ -182,7 +195,7 @@ module Gitlab
           private
 
           def service_available?
-            response = Net::HTTP.start(@uri.host, @uri.port) do |http|
+            response = Net::HTTP.start(@uri.host, @uri.port, opts) do |http|
               http.head2(@uri.request_uri)
             end
 
@@ -190,6 +203,10 @@ module Gitlab
           rescue Errno::ECONNREFUSED, Errno::ECONNRESET, EOFError
             false
           end
+
+          def opts
+            @uri.scheme == 'https' ? { use_ssl: true, verify_mode: OpenSSL::SSL::VERIFY_NONE } : {}
+          end
         end
       end
     end

data/lib/gitlab/qa/component/ldap.rb

@@ -26,6 +26,7 @@ module Gitlab
         LDAP_USER = 'tanuki'.freeze
         LDAP_PASSWORD = 'password'.freeze
         LDAP_PORT = 389
+        LDAP_TLS_PORT = 636
         BASE_DN = 'dc=example,dc=org'.freeze
         BIND_DN = 'cn=admin,dc=example,dc=org'.freeze
         BOOTSTRAP_LDIF = '/container/service/slapd/assets/config/bootstrap/ldif/custom'.freeze
@@ -46,8 +47,20 @@ module Gitlab
           @volumes[FIXTURE_PATH] = BOOTSTRAP_LDIF
         end
 
-        def enable_tls(status)
-          @environment['LDAP_TLS'] = 'false' unless status
+        # LDAP_TLS is true by default
+        def tls=(status)
+          if status
+            @environment['LDAP_TLS_CRT_FILENAME'] = "#{hostname}.crt"
+            @environment['LDAP_TLS_KEY_FILENAME'] = "#{hostname}.key"
+            @environment['LDAP_TLS_ENFORCE'] = 'true'
+            @environment['LDAP_TLS_VERIFY_CLIENT'] = 'never'
+          else
+            @environment['LDAP_TLS'] = 'false'
+          end
+        end
+
+        def tls?
+          @environment['LDAP_TLS'] != 'false'
         end
 
         def username
@@ -132,11 +145,12 @@ module Gitlab
             main:
               label: LDAP
               host: #{hostname}
-              port: #{LDAP_PORT}
+              port: #{tls? ? LDAP_TLS_PORT : LDAP_PORT}
               uid: 'uid'
               bind_dn: #{BIND_DN}
               password: #{ADMIN_PASSWORD}
-              method: 'plain'
+              method: #{tls? ? 'simple_tls' : 'plain'}
+              verify_certificates: false
               base: #{BASE_DN}
               user_filter: ''
               group_base: #{GROUP_BASE}
@@ -153,6 +167,10 @@ module Gitlab
           ::Gitlab::QA::Runtime::Env.ldap_username = username
           ::Gitlab::QA::Runtime::Env.ldap_password = password
         end
+
+        def set_accept_insecure_certs
+          ::Gitlab::QA::Runtime::Env.accept_insecure_certs = 'true'
+        end
       end
     end
   end

data/lib/gitlab/qa/scenario/test/integration/ldap.rb

@@ -6,29 +6,34 @@ module Gitlab
       module Test
         module Integration
           class LDAP < Scenario::Template
+            attr_reader :gitlab_name, :spec_suite, :tls
+
+            def configure(gitlab, ldap)
+              raise NotImplementedError
+            end
+
             # rubocop:disable Metrics/AbcSize
             def perform(release)
               Component::Gitlab.perform do |gitlab|
                 gitlab.release = release
-                gitlab.name = 'gitlab-ldap'
+                gitlab.name = gitlab_name
                 gitlab.network = 'test'
+                gitlab.tls = tls
 
                 Component::LDAP.perform do |ldap|
-                  ldap.enable_tls(false)
+                  ldap.name = 'ldap-server'
                   ldap.network = 'test'
                   ldap.set_gitlab_credentials
+                  ldap.tls = tls
 
-                  gitlab.omnibus_config = <<~OMNIBUS
-                    gitlab_rails['ldap_enabled'] = true;
-                    gitlab_rails['ldap_servers'] = #{ldap.to_config};
-                  OMNIBUS
+                  configure(gitlab, ldap)
 
                   ldap.instance do
                     gitlab.instance do
-                      puts 'Running LDAP specs!'
+                      puts "Running #{spec_suite} specs!"
 
                       Component::Specs.perform do |specs|
-                        specs.suite = 'Test::Integration::LDAP'
+                        specs.suite = spec_suite
                         specs.release = gitlab.release
                         specs.network = gitlab.network
                         specs.args = [gitlab.address]

data/lib/gitlab/qa/scenario/test/integration/ldap_no_tls.rb

@@ -0,0 +1,26 @@
+require 'yaml'
+
+module Gitlab
+  module QA
+    module Scenario
+      module Test
+        module Integration
+          class LDAPNoTLS < LDAP
+            def initialize
+              @gitlab_name = 'gitlab-ldap'
+              @spec_suite = 'Test::Integration::LDAPNoTLS'
+              @tls = false
+            end
+
+            def configure(gitlab, ldap)
+              gitlab.omnibus_config = <<~OMNIBUS
+                    gitlab_rails['ldap_enabled'] = true;
+                    gitlab_rails['ldap_servers'] = #{ldap.to_config};
+              OMNIBUS
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/gitlab/qa/scenario/test/integration/ldap_tls.rb

@@ -0,0 +1,29 @@
+require 'yaml'
+
+module Gitlab
+  module QA
+    module Scenario
+      module Test
+        module Integration
+          class LDAPTLS < LDAP
+            def initialize
+              @gitlab_name = 'gitlab'
+              @spec_suite = 'Test::Integration::LDAPTLS'
+              @tls = true
+            end
+
+            def configure(gitlab, ldap)
+              ldap.set_accept_insecure_certs
+              gitlab.omnibus_config = <<~OMNIBUS
+                    gitlab_rails['ldap_enabled'] = true;
+                    gitlab_rails['ldap_servers'] = #{ldap.to_config};
+                    letsencrypt['enable'] = false;
+                    external_url '#{gitlab.address}';
+              OMNIBUS
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/gitlab/qa/version.rb

@@ -1,5 +1,5 @@
 module Gitlab
   module QA
-    VERSION = '2.7.1'.freeze
+    VERSION = '2.7.2'.freeze
   end
 end

data/tls_certificates/gitlab/gitlab.test.crt

@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----
+MIIFSjCCAzICCQDft0SZAQGuIzANBgkqhkiG9w0BAQsFADBnMQswCQYDVQQGEwJV
+UzELMAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDzANBgNVBAoM
+BkdpdExhYjEMMAoGA1UECwwDT3JnMRQwEgYDVQQDDAtnaXRsYWIudGVzdDAeFw0x
+ODEwMjUwOTU0MzRaFw0yODEwMjIwOTU0MzRaMGcxCzAJBgNVBAYTAlVTMQswCQYD
+VQQIDAJDQTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEPMA0GA1UECgwGR2l0TGFi
+MQwwCgYDVQQLDANPcmcxFDASBgNVBAMMC2dpdGxhYi50ZXN0MIICIjANBgkqhkiG
+9w0BAQEFAAOCAg8AMIICCgKCAgEAykiE+PF8CBAP/k0NMHiMJ+TqMnupLl5Ypo0N
+TH/Y8qFEqV4MaiGoqHwHiqY3tC0Zshe7uowS7NDnmTH/5DeNOmi/zI+FhTEHJKhP
+DM5Q0MXJrUIi6eGmojB5l/3t3OBnvoFaC0zpkpg5uR8QL5RbB8Gyf5/5eCEbP3/h
+R2q9JFUOEyTYEyv+1K/WegQyaLPtiPtvfTTmx1uEDfP1vuiMKuPOQ/3N8nFky1ny
+8c0P2wQv6E/qtRafKxaPbA/OmSpx0JGol43EjgOqy5FIJBT+yYP2navvAw+BvZ3k
+6qiQL6dx5pOGPAd8uxLmcj4In54IZWxs8fxUlNpcLWbo8noVxIQP2j7MAGXwGatM
+eaUnyD5DmHlHS92gvHU3nKagDEuJjnBCCWtaVugeAWuW+8fJHgYbwuRQ8h/5hTWc
+T80cEHDmKB/Uft4QLc65C7LQjKmfeX5qLgufk+dMmWj116csejiTFPCue0/RjSxK
+C/562dbt/ZcScLXymkUiewc7FzHKExquY42I/yudoMYS9EBAyDcDE72WrUcIpECH
+OMIt+EgXoDw1e/aTc5orlBIFjhknnPnP5RtrBj/OdXEgwMfD/N+ZYpY43ZIjBHWM
+Zpj4YxLdBXkFJ/JG632Pp+bOgF5TgzCnV2Je6r1VMAAH8U0B105xAnyl5qtepUO5
++THpCdUCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEADFyEMU0aLOrNO60PerQ25kE9
+jqzVhySyg6Pwsus7LIKTQLeo9abGmdjcbuqmBRLdxCYHbjbgW07I28YS4x4m7/ay
+YAePaMRb4Qt1yyaWcPIsw57sMnoC8iqRqXJPyr8i9F+RtzoC7Hki6zORxms8TF5C
+FbNB2ZBO/mbe8Lro0G1j5rxrvndQ6/OnwLQFW/VCfDDOIM7TXm6yYyiUpj3MSBay
+LDJaT9N5xMxF82OjcMB0/flWFxI7QmNXTe7M6HQbp05Jyw9VCEAVflI7zkaYY329
+7XvVJbpf1A3SegqxGlF2gD31cxViYBRV7t0pO6mcwt0/iAzAVicg/qtoPUg8zFwN
+xU89jk+UV5oTQc06u6CbIuF1eYy3MJGmQlCsEd/OOC9zl7xRHBA4ro3CTCH238L6
+lGEi8FRombuPcv3hD9PuW/RAQ5v03lF9D7UVtEHtb2VCZ0EXL8YFRuqQpPvdPqQ+
+znaohk2jKRSttvZCXw5TaWdDctDue/b70cEVPoAzXACjaX/oOau+MJvMaI7i5BXF
+JhBcoXh7FXIgyDszzgGq5DxjCcpy0X5o2TGC5id8zUNBY8ek6UV3mHk2FQzYf+7C
+8Qvv++R3+Ubk5DryuuWa/R2ybemQja830Fgiab9hgvhhgCOCbmxLIKVrePenMOXc
+vvjQTrP9ZinR50bKUf8=
+-----END CERTIFICATE-----

data/tls_certificates/gitlab/gitlab.test.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gitlab-qa
 version: !ruby/object:Gem::Version
-  version: 2.7.1
+  version: 2.7.2
 platform: ruby
 authors:
 - Grzegorz Bizon
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-10-23 00:00:00.000000000 Z
+date: 2018-10-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: climate_control
@@ -168,6 +168,8 @@ files:
 - lib/gitlab/qa/scenario/test/integration/instance_saml.rb
 - lib/gitlab/qa/scenario/test/integration/kubernetes.rb
 - lib/gitlab/qa/scenario/test/integration/ldap.rb
+- lib/gitlab/qa/scenario/test/integration/ldap_no_tls.rb
+- lib/gitlab/qa/scenario/test/integration/ldap_tls.rb
 - lib/gitlab/qa/scenario/test/integration/mattermost.rb
 - lib/gitlab/qa/scenario/test/integration/object_storage.rb
 - lib/gitlab/qa/scenario/test/integration/saml.rb
@@ -176,6 +178,8 @@ files:
 - lib/gitlab/qa/scenario/test/omnibus/upgrade.rb
 - lib/gitlab/qa/scenario/test/sanity/version.rb
 - lib/gitlab/qa/version.rb
+- tls_certificates/gitlab/gitlab.test.crt
+- tls_certificates/gitlab/gitlab.test.key
 homepage: http://about.gitlab.com
 licenses:
 - MIT