@red-hat-developer-hub/e2e-test-utils 1.1.13 → 1.1.15

package/dist/deployment/rhdh/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/rhdh/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAiB1E,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAGjB,MAAM,YAAY,CAAC;AAEpB,qBAAa,cAAc;IAClB,SAAS,yBAAgC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,gBAAgB,CAAC;gBAE9B,SAAS,EAAE,MAAM;IAUvB,MAAM,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAyBpD,eAAe;YAmBf,aAAa;IAqB3B;;;OAGG;YACW,0BAA0B;YAuC1B,oBAAoB;YAWpB,eAAe;YAmCf,mBAAmB;IAiD3B,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAWrC;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAOpC,cAAc,CAAC,OAAO,GAAE,MAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBpD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;YAIjB,oBAAoB;IAsClC;;;OAGG;YACW,0BAA0B;IAwCxC,OAAO,CAAC,sBAAsB;IAoCxB,SAAS,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrE,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,SAAS;CAMlB"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/rhdh/deployment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAkB1E,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAGjB,MAAM,YAAY,CAAC;AAEpB,qBAAa,cAAc;IAClB,SAAS,yBAAgC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,gBAAgB,CAAC;gBAE9B,SAAS,EAAE,MAAM;IAKvB,MAAM,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAuCpD,eAAe;YAmBf,aAAa;IAqB3B;;;OAGG;YACW,0BAA0B;YAuC1B,oBAAoB;YAWpB,eAAe;YAmCf,mBAAmB;IAiD3B,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAWrC;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAOpC,cAAc,CAAC,OAAO,GAAE,MAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBpD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;YAIjB,oBAAoB;IAsClC;;;OAGG;YACW,0BAA0B;IAwCxC,OAAO,CAAC,sBAAsB;IAoCxB,SAAS,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrE,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,SAAS;CAMlB"}

package/dist/deployment/rhdh/deployment.js

@@ -5,6 +5,7 @@ import { test } from "@playwright/test";
 import { mergeYamlFilesIfExists, deepMerge } from "../../utils/merge-yamls.js";
 import { loadAndInjectPluginMetadata, generateDynamicPluginsConfigFromMetadata, } from "../../utils/plugin-metadata.js";
 import { envsubst } from "../../utils/common.js";
+import { runOnce } from "../../playwright/run-once.js";
 import cloneDeepWith from "lodash.clonedeepwith";
 import fs from "fs-extra";
 import { DEFAULT_CONFIG_PATHS, AUTH_CONFIG_PATHS, CHART_URL, } from "./constants.js";
@@ -15,29 +16,33 @@ export class RHDHDeployment {
     constructor(namespace) {
         this.deploymentConfig = this._buildDeploymentConfig({ namespace });
         this.rhdhUrl = this._buildBaseUrl();
-        this._log(`RHDH deployment initialized (namespace: ${this.deploymentConfig.namespace})`);
-        this._log("RHDH Base URL: " + this.rhdhUrl);
-        console.table(this.deploymentConfig);
     }
     async deploy(options) {
-        this._log("Starting RHDH deployment...");
         // Default 600s, custom number to override, null to skip and let consumer control the timeout
         const timeout = options?.timeout === undefined ? 600_000 : options.timeout;
         if (timeout !== null) {
             test.setTimeout(timeout);
         }
-        await this.k8sClient.createNamespaceIfNotExists(this.deploymentConfig.namespace);
-        await this._applyAppConfig();
-        await this._applySecrets();
-        if (this.deploymentConfig.method === "helm") {
-            await this._deployWithHelm(this.deploymentConfig.valueFile);
-            await this.scaleDownAndRestart(); // Restart as helm does not monitor config changes
-        }
-        else {
-            await this._applyDynamicPlugins();
-            await this._deployWithOperator(this.deploymentConfig.subscription);
+        const executed = await runOnce(`deploy-${this.deploymentConfig.namespace}`, async () => {
+            this._log("Starting RHDH deployment...");
+            this._log("RHDH Base URL: " + this.rhdhUrl);
+            console.table(this.deploymentConfig);
+            await this.k8sClient.createNamespaceIfNotExists(this.deploymentConfig.namespace);
+            await this._applyAppConfig();
+            await this._applySecrets();
+            if (this.deploymentConfig.method === "helm") {
+                await this._deployWithHelm(this.deploymentConfig.valueFile);
+                await this.scaleDownAndRestart(); // Restart as helm does not monitor config changes
+            }
+            else {
+                await this._applyDynamicPlugins();
+                await this._deployWithOperator(this.deploymentConfig.subscription);
+            }
+            await this.waitUntilReady();
+        });
+        if (!executed) {
+            this._log(`Deployment already completed for namespace "${this.deploymentConfig.namespace}", skipping`);
         }
-        await this.waitUntilReady();
     }
     async _applyAppConfig() {
         const authConfig = AUTH_CONFIG_PATHS[this.deploymentConfig.auth];
@@ -282,8 +287,6 @@ export class RHDHDeployment {
         if (deploymentOptions) {
             this.deploymentConfig = this._buildDeploymentConfig(deploymentOptions);
             this.rhdhUrl = this._buildBaseUrl();
-            this._log(`RHDH deployment initialized (namespace: ${this.deploymentConfig.namespace})`);
-            console.table(this.deploymentConfig);
         }
         await this.k8sClient.createNamespaceIfNotExists(this.deploymentConfig.namespace);
     }

package/dist/playwright/base-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-config.d.ts","sourceRoot":"","sources":["../../src/playwright/base-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAG1B;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,oBA4BxB,CAAC;AAEF;;;;;GAKG;AAEH,wBAAgB,YAAY,CAC1B,SAAS,GAAE,IAAI,CAAC,oBAAoB,EAAE,UAAU,CAAM,GACrD,oBAAoB,CAKtB"}
+{"version":3,"file":"base-config.d.ts","sourceRoot":"","sources":["../../src/playwright/base-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAG1B;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,oBA6BxB,CAAC;AAEF;;;;;GAKG;AAEH,wBAAgB,YAAY,CAC1B,SAAS,GAAE,IAAI,CAAC,oBAAoB,EAAE,UAAU,CAAM,GACrD,oBAAoB,CAKtB"}

package/dist/playwright/base-config.js

@@ -15,6 +15,7 @@ export const baseConfig = {
         ["list"],
         ["html", { outputFolder: "playwright-report", open: "on-failure" }],
         ["json", { outputFile: "playwright-report/results.json" }],
+        [resolve(import.meta.dirname, "../playwright/teardown-reporter.js")],
     ],
     use: {
         ignoreHTTPSErrors: true,

package/dist/playwright/fixtures/test.d.ts

@@ -1,5 +1,6 @@
 import { RHDHDeployment } from "../../deployment/rhdh/index.js";
 import { LoginHelper, UIhelper } from "../helpers/index.js";
+import { runOnce } from "../run-once.js";
 type RHDHDeploymentTestFixtures = {
     rhdh: RHDHDeployment;
     uiHelper: UIhelper;
@@ -8,6 +9,8 @@ type RHDHDeploymentTestFixtures = {
 type RHDHDeploymentWorkerFixtures = {
     rhdhDeploymentWorker: RHDHDeployment;
 };
+export declare const test: import("playwright/test").TestType<import("playwright/test").PlaywrightTestArgs & import("playwright/test").PlaywrightTestOptions & RHDHDeploymentTestFixtures, import("playwright/test").PlaywrightWorkerArgs & import("playwright/test").PlaywrightWorkerOptions & RHDHDeploymentWorkerFixtures> & {
+    runOnce: typeof runOnce;
+};
 export * from "@playwright/test";
-export declare const test: import("playwright/test").TestType<import("playwright/test").PlaywrightTestArgs & import("playwright/test").PlaywrightTestOptions & RHDHDeploymentTestFixtures, import("playwright/test").PlaywrightWorkerArgs & import("playwright/test").PlaywrightWorkerOptions & RHDHDeploymentWorkerFixtures>;
 //# sourceMappingURL=test.d.ts.map

package/dist/playwright/fixtures/test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../../src/playwright/fixtures/test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE5D,KAAK,0BAA0B,GAAG;IAChC,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAClC,oBAAoB,EAAE,cAAc,CAAC;CACtC,CAAC;AAEF,cAAc,kBAAkB,CAAC;AAEjC,eAAO,MAAM,IAAI,oSAkDf,CAAC"}
+{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../../src/playwright/fixtures/test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEzC,KAAK,0BAA0B,GAAG;IAChC,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAClC,oBAAoB,EAAE,cAAc,CAAC;CACtC,CAAC;AA2CF,eAAO,MAAM,IAAI;;CAEf,CAAC;AAEH,cAAc,kBAAkB,CAAC"}

package/dist/playwright/fixtures/test.js

@@ -1,23 +1,14 @@
 import { RHDHDeployment } from "../../deployment/rhdh/index.js";
 import { test as base } from "@playwright/test";
 import { LoginHelper, UIhelper } from "../helpers/index.js";
-export * from "@playwright/test";
-export const test = base.extend({
+import { runOnce } from "../run-once.js";
+const baseTest = base.extend({
     rhdhDeploymentWorker: [
         // eslint-disable-next-line no-empty-pattern
         async ({}, use, workerInfo) => {
-            console.log(`Deploying rhdh for plugin ${workerInfo.project.name} in namespace ${workerInfo.project.name}`);
             const rhdhDeployment = new RHDHDeployment(workerInfo.project.name);
-            try {
-                await rhdhDeployment.configure();
-                await use(rhdhDeployment);
-            }
-            finally {
-                if (process.env.CI) {
-                    console.log(`Deleting namespace ${workerInfo.project.name}`);
-                    await rhdhDeployment.teardown();
-                }
-            }
+            await rhdhDeployment.configure();
+            await use(rhdhDeployment);
         },
         { scope: "worker", auto: true },
     ],
@@ -46,3 +37,7 @@ export const test = base.extend({
         { scope: "test" },
     ],
 });
+export const test = Object.assign(baseTest, {
+    runOnce,
+});
+export * from "@playwright/test";

package/dist/playwright/helpers/auth-api-helper.d.ts

@@ -0,0 +1,7 @@
+import { Page } from "@playwright/test";
+export declare class AuthApiHelper {
+    private readonly page;
+    constructor(page: Page);
+    getToken(provider?: string, environment?: string): Promise<any>;
+}
+//# sourceMappingURL=auth-api-helper.d.ts.map

package/dist/playwright/helpers/auth-api-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-api-helper.d.ts","sourceRoot":"","sources":["../../../src/playwright/helpers/auth-api-helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGxC,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;gBAEhB,IAAI,EAAE,IAAI;IAIhB,QAAQ,CACZ,QAAQ,GAAE,MAAe,EACzB,WAAW,GAAE,MAAqB;CA8BrC"}

package/dist/playwright/helpers/auth-api-helper.js

@@ -0,0 +1,31 @@
+// here, we spy on the request to get the Backstage token to use APIs
+export class AuthApiHelper {
+    page;
+    constructor(page) {
+        this.page = page;
+    }
+    async getToken(provider = "oidc", environment = "production") {
+        try {
+            const response = await this.page.request.get(`/api/auth/${provider}/refresh?optional=&scope=&env=${environment}`, {
+                headers: {
+                    // eslint-disable-next-line @typescript-eslint/naming-convention
+                    "x-requested-with": "XMLHttpRequest",
+                },
+            });
+            if (!response.ok()) {
+                throw new Error(`HTTP error! Status: ${response.status()}`);
+            }
+            const body = await response.json();
+            if (typeof body?.backstageIdentity?.token === "string") {
+                return body.backstageIdentity.token;
+            }
+            else {
+                throw new TypeError("Token not found in response body");
+            }
+        }
+        catch (error) {
+            console.error("Failed to retrieve the token:", error);
+            throw error;
+        }
+    }
+}

package/dist/playwright/helpers/index.d.ts

@@ -2,4 +2,6 @@ export { GITHUB_API_ENDPOINTS } from "./api-endpoints.js";
 export { APIHelper } from "./api-helper.js";
 export { LoginHelper, setupBrowser } from "./common.js";
 export { UIhelper } from "./ui-helper.js";
+export { RbacApiHelper, Policy, Response } from "./rbac-api-helper.js";
+export { AuthApiHelper } from "./auth-api-helper.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/playwright/helpers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/playwright/helpers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/playwright/helpers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/playwright/helpers/index.js

@@ -2,3 +2,5 @@ export { GITHUB_API_ENDPOINTS } from "./api-endpoints.js";
 export { APIHelper } from "./api-helper.js";
 export { LoginHelper, setupBrowser } from "./common.js";
 export { UIhelper } from "./ui-helper.js";
+export { RbacApiHelper, Response } from "./rbac-api-helper.js";
+export { AuthApiHelper } from "./auth-api-helper.js";

package/dist/playwright/helpers/rbac-api-helper.d.ts

@@ -0,0 +1,35 @@
+import type { PermissionAction, RoleConditionalPolicyDecision } from "@backstage-community/plugin-rbac-common";
+import { APIResponse } from "@playwright/test";
+export interface Policy {
+    entityReference: string;
+    permission: string;
+    policy: string;
+    effect: string;
+}
+/**
+ * Thin HTTP client for the RHDH RBAC permission API.
+ * Uses a static factory (`build`) because the Playwright `APIRequestContext`
+ * must be created asynchronously — a constructor cannot await it.
+ */
+export declare class RbacApiHelper {
+    private readonly token;
+    private readonly apiUrl;
+    private readonly authHeader;
+    private myContext;
+    private constructor();
+    /** Creates a fully-initialised instance with a live Playwright request context. */
+    static build(token: string): Promise<RbacApiHelper>;
+    getPoliciesByRole(policy: string): Promise<APIResponse>;
+    /** Fetches all conditional policies across all roles. */
+    getConditions(): Promise<APIResponse>;
+    /** Filters a full conditions list down to those belonging to a specific role entity ref. */
+    getConditionsByRole(role: string, remainingConditions: RoleConditionalPolicyDecision<PermissionAction>[]): Promise<RoleConditionalPolicyDecision<PermissionAction>[]>;
+    deleteRole(role: string): Promise<APIResponse>;
+    deletePolicy(policy: string, policies: Policy[]): Promise<APIResponse>;
+    /** `id` comes from the `RoleConditionalPolicyDecision.id` field returned by the API. */
+    deleteCondition(id: string): Promise<APIResponse>;
+}
+export declare class Response {
+    static removeMetadataFromResponse(response: APIResponse): Promise<unknown[]>;
+}
+//# sourceMappingURL=rbac-api-helper.d.ts.map

package/dist/playwright/helpers/rbac-api-helper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-api-helper.d.ts","sourceRoot":"","sources":["../../../src/playwright/helpers/rbac-api-helper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,6BAA6B,EAC9B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAqB,WAAW,EAAW,MAAM,kBAAkB,CAAC;AAE3E,MAAM,WAAW,MAAM;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,qBAAa,aAAa;IAUJ,OAAO,CAAC,QAAQ,CAAC,KAAK;IAT1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkD;IACzE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAKzB;IACF,OAAO,CAAC,SAAS,CAAqB;IAEtC,OAAO;IAOP,mFAAmF;WAC/D,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IASnD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAIpE,yDAAyD;IAC5C,aAAa,IAAI,OAAO,CAAC,WAAW,CAAC;IAIlD,4FAA4F;IAC/E,mBAAmB,CAC9B,IAAI,EAAE,MAAM,EACZ,mBAAmB,EAAE,6BAA6B,CAAC,gBAAgB,CAAC,EAAE,GACrE,OAAO,CAAC,6BAA6B,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAMhD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAI9C,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;IAM5D,wFAAwF;IAC3E,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAG/D;AAED,qBAAa,QAAQ;WACN,0BAA0B,CACrC,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,OAAO,EAAE,CAAC;CActB"}

package/dist/playwright/helpers/rbac-api-helper.js

@@ -0,0 +1,63 @@
+import { request } from "@playwright/test";
+/**
+ * Thin HTTP client for the RHDH RBAC permission API.
+ * Uses a static factory (`build`) because the Playwright `APIRequestContext`
+ * must be created asynchronously — a constructor cannot await it.
+ */
+export class RbacApiHelper {
+    token;
+    apiUrl = process.env.RHDH_BASE_URL + "/api/permission/";
+    authHeader;
+    myContext;
+    constructor(token) {
+        this.token = token;
+        this.authHeader = {
+            Accept: "application/json",
+            Authorization: `Bearer ${this.token}`,
+        };
+    }
+    /** Creates a fully-initialised instance with a live Playwright request context. */
+    static async build(token) {
+        const instance = new RbacApiHelper(token);
+        instance.myContext = await request.newContext({
+            baseURL: instance.apiUrl,
+            extraHTTPHeaders: instance.authHeader,
+        });
+        return instance;
+    }
+    async getPoliciesByRole(policy) {
+        return await this.myContext.get(`policies/role/default/${policy}`);
+    }
+    /** Fetches all conditional policies across all roles. */
+    async getConditions() {
+        return await this.myContext.get(`roles/conditions`);
+    }
+    /** Filters a full conditions list down to those belonging to a specific role entity ref. */
+    async getConditionsByRole(role, remainingConditions) {
+        return remainingConditions.filter((condition) => condition.roleEntityRef === role);
+    }
+    async deleteRole(role) {
+        return await this.myContext.delete(`roles/role/default/${role}`);
+    }
+    async deletePolicy(policy, policies) {
+        return await this.myContext.delete(`policies/role/default/${policy}`, {
+            data: policies,
+        });
+    }
+    /** `id` comes from the `RoleConditionalPolicyDecision.id` field returned by the API. */
+    async deleteCondition(id) {
+        return await this.myContext.delete(`roles/conditions/${id}`);
+    }
+}
+export class Response {
+    static async removeMetadataFromResponse(response) {
+        const responseJson = await response.json();
+        if (!Array.isArray(responseJson)) {
+            throw new TypeError(`Expected an array from policy response but received: ${JSON.stringify(responseJson)}`);
+        }
+        return responseJson.map((item) => {
+            delete item.metadata;
+            return item;
+        });
+    }
+}

package/dist/playwright/run-once.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Executes a function only once per test run, even across multiple workers.
+ * Automatically resets between test runs (each run uses a unique flag directory).
+ * Safe for fullyParallel: true (uses proper-lockfile for cross-process coordination).
+ *
+ * @param key - Unique identifier for this setup operation
+ * @param fn - Function to execute once
+ * @returns true if executed, false if skipped (already ran)
+ */
+export declare function runOnce(key: string, fn: () => Promise<void> | void): Promise<boolean>;
+//# sourceMappingURL=run-once.d.ts.map

package/dist/playwright/run-once.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-once.d.ts","sourceRoot":"","sources":["../../src/playwright/run-once.ts"],"names":[],"mappings":"AAQA;;;;;;;;GAQG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CAyBlB"}

package/dist/playwright/run-once.js

@@ -0,0 +1,40 @@
+import fs from "fs";
+import path from "path";
+import os from "os";
+import lockfile from "proper-lockfile";
+// Each test run gets its own flag directory (ppid = Playwright runner PID)
+const flagDir = path.join(os.tmpdir(), `playwright-once-${process.ppid}`);
+/**
+ * Executes a function only once per test run, even across multiple workers.
+ * Automatically resets between test runs (each run uses a unique flag directory).
+ * Safe for fullyParallel: true (uses proper-lockfile for cross-process coordination).
+ *
+ * @param key - Unique identifier for this setup operation
+ * @param fn - Function to execute once
+ * @returns true if executed, false if skipped (already ran)
+ */
+export async function runOnce(key, fn) {
+    const flagFile = path.join(flagDir, `${key}.done`);
+    const lockTarget = path.join(flagDir, key);
+    fs.mkdirSync(flagDir, { recursive: true });
+    // already executed, skip without locking
+    if (fs.existsSync(flagFile))
+        return false;
+    // Ensure lock target file exists
+    fs.writeFileSync(lockTarget, "", { flag: "a" });
+    const release = await lockfile.lock(lockTarget, {
+        retries: { retries: 30, minTimeout: 200 },
+        stale: 300_000,
+    });
+    try {
+        // Double-check after acquiring lock
+        if (fs.existsSync(flagFile))
+            return false;
+        await fn();
+        fs.writeFileSync(flagFile, "");
+        return true;
+    }
+    finally {
+        await release();
+    }
+}

package/dist/playwright/teardown-namespaces.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Registers a namespace for teardown after all tests in a project complete.
+ * Used by consumers who deploy to custom namespaces (not matching the project name).
+ */
+export declare function registerTeardownNamespace(projectName: string, namespace: string): void;
+/**
+ * Returns all custom namespaces registered for teardown for a project.
+ * Used by the teardown reporter.
+ */
+export declare function getTeardownNamespaces(projectName: string): string[];
+//# sourceMappingURL=teardown-namespaces.d.ts.map

package/dist/playwright/teardown-namespaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"teardown-namespaces.d.ts","sourceRoot":"","sources":["../../src/playwright/teardown-namespaces.ts"],"names":[],"mappings":"AAsBA;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,IAAI,CASN;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAEnE"}

package/dist/playwright/teardown-namespaces.js

@@ -0,0 +1,34 @@
+import fs from "fs";
+import path from "path";
+import os from "os";
+// Workers use process.ppid (Playwright runner PID)
+// Reporter (main process) uses process.pid
+// Both resolve to the same directory.
+const TEARDOWN_DIR = path.join(os.tmpdir(), `playwright-teardown-${process.ppid || process.pid}`);
+const TEARDOWN_FILE = path.join(TEARDOWN_DIR, "namespaces.json");
+function read() {
+    if (!fs.existsSync(TEARDOWN_FILE))
+        return {};
+    return JSON.parse(fs.readFileSync(TEARDOWN_FILE, "utf-8"));
+}
+/**
+ * Registers a namespace for teardown after all tests in a project complete.
+ * Used by consumers who deploy to custom namespaces (not matching the project name).
+ */
+export function registerTeardownNamespace(projectName, namespace) {
+    fs.mkdirSync(TEARDOWN_DIR, { recursive: true });
+    const registry = read();
+    const namespaces = registry[projectName] ?? [];
+    if (!namespaces.includes(namespace)) {
+        namespaces.push(namespace);
+        registry[projectName] = namespaces;
+        fs.writeFileSync(TEARDOWN_FILE, JSON.stringify(registry));
+    }
+}
+/**
+ * Returns all custom namespaces registered for teardown for a project.
+ * Used by the teardown reporter.
+ */
+export function getTeardownNamespaces(projectName) {
+    return read()[projectName] ?? [];
+}

package/dist/playwright/teardown-reporter.d.ts

@@ -0,0 +1,15 @@
+import type { Reporter, Suite } from "@playwright/test/reporter";
+/**
+ * Playwright reporter that deletes namespaces after all tests complete.
+ * Runs in the main process, so it survives worker restarts.
+ * Only active when process.env.CI is set.
+ *
+ * By default, deletes the namespace matching the project name.
+ * For custom namespaces, consumers can register them via registerTeardownNamespace().
+ */
+export default class TeardownReporter implements Reporter {
+    private _projects;
+    onBegin(_config: unknown, suite: Suite): void;
+    onEnd(): Promise<void>;
+}
+//# sourceMappingURL=teardown-reporter.d.ts.map

package/dist/playwright/teardown-reporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"teardown-reporter.d.ts","sourceRoot":"","sources":["../../src/playwright/teardown-reporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAC;AAIjE;;;;;;;GAOG;AACH,MAAM,CAAC,OAAO,OAAO,gBAAiB,YAAW,QAAQ;IACvD,OAAO,CAAC,SAAS,CAAqB;IAEtC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI;IAOvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA2B7B"}

package/dist/playwright/teardown-reporter.js

@@ -0,0 +1,40 @@
+import { KubernetesClientHelper } from "../utils/kubernetes-client.js";
+import { getTeardownNamespaces } from "./teardown-namespaces.js";
+/**
+ * Playwright reporter that deletes namespaces after all tests complete.
+ * Runs in the main process, so it survives worker restarts.
+ * Only active when process.env.CI is set.
+ *
+ * By default, deletes the namespace matching the project name.
+ * For custom namespaces, consumers can register them via registerTeardownNamespace().
+ */
+export default class TeardownReporter {
+    _projects = new Set();
+    onBegin(_config, suite) {
+        for (const test of suite.allTests()) {
+            const name = test.parent.project()?.name;
+            if (name)
+                this._projects.add(name);
+        }
+    }
+    async onEnd() {
+        if (!process.env.CI)
+            return;
+        let k8sClient;
+        try {
+            k8sClient = new KubernetesClientHelper();
+        }
+        catch (error) {
+            console.error(`[TeardownReporter] Cannot connect to cluster, skipping teardown:`, error);
+            return;
+        }
+        for (const projectName of this._projects) {
+            const customNamespaces = getTeardownNamespaces(projectName);
+            const namespaces = customNamespaces.length > 0 ? customNamespaces : [projectName];
+            for (const ns of namespaces) {
+                console.log(`[TeardownReporter] Deleting namespace "${ns}" (project: ${projectName})`);
+                await k8sClient.deleteNamespace(ns);
+            }
+        }
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@red-hat-developer-hub/e2e-test-utils",
-  "version": "1.1.13",
+  "version": "1.1.15",
   "description": "Test utilities for RHDH E2E tests",
   "license": "Apache-2.0",
   "repository": {
@@ -44,6 +44,10 @@
     "./keycloak": {
       "types": "./dist/deployment/keycloak/index.d.ts",
       "default": "./dist/deployment/keycloak/index.js"
+    },
+    "./teardown": {
+      "types": "./dist/playwright/teardown-namespaces.d.ts",
+      "default": "./dist/playwright/teardown-namespaces.js"
     }
   },
   "publishConfig": {
@@ -84,10 +88,12 @@
     "@types/js-yaml": "^4.0.9",
     "@types/lodash.clonedeepwith": "^4.5.9",
     "@types/lodash.mergewith": "^4.6.9",
-    "@types/node": "^24.10.1"
+    "@types/node": "^24.10.1",
+    "@types/proper-lockfile": "^4.1.4"
   },
   "dependencies": {
     "@axe-core/playwright": "^4.11.0",
+    "@backstage-community/plugin-rbac-common": "1.23.0",
     "@eslint/js": "^9.39.1",
     "@keycloak/keycloak-admin-client": "^26.0.0",
     "@kubernetes/client-node": "^1.4.0",
@@ -100,6 +106,7 @@
     "lodash.mergewith": "^4.6.2",
     "otplib": "12.0.1",
     "prettier": "^3.7.4",
+    "proper-lockfile": "^4.1.2",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.48.1",
     "zx": "^8.8.5"