2297 lines
76 KiB
YAML
2297 lines
76 KiB
YAML
##############
|
|
# Conditions #
|
|
##############
|
|
.if-not-canonical-namespace: &if-not-canonical-namespace
|
|
if: '$CI_PROJECT_NAMESPACE !~ /^gitlab(-org)?($|\/)/'
|
|
|
|
.if-not-ee: &if-not-ee
|
|
# Only consider FOSS not EE
|
|
if: '$CI_PROJECT_NAME !~ /^gitlab(-ee)?$/ && $CI_PROJECT_NAME !~ /^gitlab-jh/'
|
|
|
|
.if-not-foss: &if-not-foss
|
|
if: '$CI_PROJECT_NAME != "gitlab-foss" && $CI_PROJECT_NAME != "gitlab-ce" && $CI_PROJECT_NAME != "gitlabhq"'
|
|
|
|
.if-jh: &if-jh
|
|
# Example of these projects:
|
|
# https://jihulab.com/gitlab-cn/gitlab
|
|
# https://gitlab.com/gitlab-org-sandbox/gitlab-jh-validation
|
|
if: '$CI_PROJECT_PATH =~ /^gitlab-(jh|cn)\/.*/ || $CI_PROJECT_NAME =~ /^gitlab-jh/'
|
|
|
|
.if-force-ci: &if-force-ci
|
|
if: '$FORCE_GITLAB_CI'
|
|
|
|
.if-default-refs: &if-default-refs
|
|
if: '$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH || $CI_COMMIT_REF_NAME =~ /^[\d-]+-stable(-ee)?$/ || $CI_COMMIT_REF_NAME =~ /^\d+-\d+-auto-deploy-\d+$/ || $CI_COMMIT_REF_NAME =~ /^security\// || $CI_COMMIT_REF_NAME == "ruby2" || ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") || $CI_COMMIT_TAG || $FORCE_GITLAB_CI'
|
|
|
|
.if-default-branch-refs: &if-default-branch-refs
|
|
if: '$CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH && $CI_MERGE_REQUEST_IID == null'
|
|
|
|
.if-auto-deploy-branches: &if-auto-deploy-branches
|
|
if: '$CI_COMMIT_BRANCH =~ /^\d+-\d+-auto-deploy-\d+$/'
|
|
|
|
.if-default-branch-or-tag: &if-default-branch-or-tag
|
|
if: '($CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH && $CI_MERGE_REQUEST_IID == null) || $CI_COMMIT_TAG'
|
|
|
|
.if-tag: &if-tag
|
|
if: '$CI_COMMIT_TAG'
|
|
|
|
.if-merge-request: &if-merge-request
|
|
if: '$CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached"'
|
|
|
|
# Once https://gitlab.com/gitlab-org/gitlab/-/issues/373904 is implemented, we should be able to change this back to
|
|
# if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_APPROVALS_COUNT > 0'
|
|
# or any similar condition to check that the MR has *any* approval (not just required approval).
|
|
#
|
|
# Temprorarily adding || $CI_MERGE_REQUEST_LABELS =~ /pipeline:run-full-rspec/ for backward compatibility,
|
|
# remove once https://gitlab.com/gitlab-org/quality/quality-engineering/team-tasks/-/issues/1557 is fully rolled out
|
|
.if-merge-request-approved: &if-merge-request-approved
|
|
if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_LABELS =~ /pipeline:mr-approved/ || $CI_MERGE_REQUEST_LABELS =~ /pipeline:run-full-rspec/'
|
|
|
|
# Temprorarily adding && $CI_MERGE_REQUEST_LABELS !~ /pipeline:run-full-rspec/ for backward compatibility,
|
|
# remove once https://gitlab.com/gitlab-org/quality/quality-engineering/team-tasks/-/issues/1557 is fully rolled out
|
|
.if-merge-request-not-approved: &if-merge-request-not-approved
|
|
if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_LABELS !~ /pipeline:mr-approved/ && $CI_MERGE_REQUEST_LABELS !~ /pipeline:run-full-rspec/'
|
|
|
|
.if-automated-merge-request: &if-automated-merge-request
|
|
if: '$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME == "release-tools/update-gitaly" || $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /stable-ee$/'
|
|
|
|
.if-merge-request-targeting-stable-branch: &if-merge-request-targeting-stable-branch
|
|
if: '($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME =~ /^[\d-]+-stable(-ee)?$/'
|
|
|
|
.if-merge-request-labels-run-in-ruby2: &if-merge-request-labels-run-in-ruby2
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-in-ruby2/'
|
|
|
|
.if-merge-request-labels-as-if-foss: &if-merge-request-labels-as-if-foss
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-as-if-foss/'
|
|
|
|
.if-merge-request-labels-as-if-jh: &if-merge-request-labels-as-if-jh
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-as-if-jh/'
|
|
|
|
.if-merge-request-labels-update-caches: &if-merge-request-labels-update-caches
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:update-cache/'
|
|
|
|
.if-merge-request-labels-run-all-rspec: &if-merge-request-labels-run-all-rspec
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-all-rspec/'
|
|
|
|
.if-merge-request-labels-run-all-jest: &if-merge-request-labels-run-all-jest
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-all-jest/'
|
|
|
|
.if-merge-request-labels-run-all-e2e: &if-merge-request-labels-run-all-e2e
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-all-e2e/'
|
|
|
|
.if-merge-request-labels-run-single-db: &if-merge-request-labels-run-single-db
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-single-db/'
|
|
|
|
.if-merge-request-labels-run-review-app: &if-merge-request-labels-run-review-app
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-review-app/'
|
|
|
|
.if-merge-request-labels-run-on-pg11: &if-merge-request-labels-run-on-pg11
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-on-pg11/'
|
|
|
|
.if-merge-request-labels-skip-undercoverage: &if-merge-request-labels-skip-undercoverage
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:skip-undercoverage/'
|
|
|
|
.if-merge-request-labels-jh-contribution: &if-merge-request-labels-jh-contribution
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /JiHu contribution/'
|
|
|
|
.if-merge-request-labels-group-global-search: &if-merge-request-labels-group-global-search
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /group::global search/'
|
|
|
|
.if-merge-request-labels-pipeline-expedite: &if-merge-request-labels-pipeline-expedite
|
|
if: '($CI_MERGE_REQUEST_LABELS =~ /master:(foss-)?broken/ || $CI_MERGE_REQUEST_TITLE =~ /^[Rr]evert/) && $CI_MERGE_REQUEST_LABELS =~ /pipeline:expedite/'
|
|
|
|
.if-merge-request-labels-frontend-and-feature-flag: &if-merge-request-labels-frontend-and-feature-flag
|
|
if: '$CI_MERGE_REQUEST_LABELS =~ /frontend/ && $CI_MERGE_REQUEST_LABELS =~ /feature flag/'
|
|
|
|
.if-security-merge-request: &if-security-merge-request
|
|
if: '$CI_PROJECT_NAMESPACE == "gitlab-org/security" && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached")'
|
|
|
|
.if-fork-merge-request: &if-fork-merge-request
|
|
if: '$CI_PROJECT_NAMESPACE !~ /^gitlab(-org)?($|\/)/ && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_LABELS !~ /pipeline:run-all-rspec/'
|
|
|
|
.if-schedule-pipeline: &if-schedule-pipeline
|
|
if: '$CI_PIPELINE_SOURCE == "schedule"'
|
|
|
|
.if-schedule-maintenance: &if-schedule-maintenance
|
|
if: '$CI_PIPELINE_SOURCE == "schedule" && $SCHEDULE_TYPE == "maintenance"'
|
|
|
|
.if-default-branch-schedule-nightly: &if-default-branch-schedule-nightly
|
|
if: '$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_PIPELINE_SOURCE == "schedule" && $SCHEDULE_TYPE == "nightly"'
|
|
|
|
.if-ruby2-branch-schedule-nightly: &if-ruby2-branch-schedule-nightly
|
|
if: '$CI_COMMIT_BRANCH == "ruby2" && $CI_PIPELINE_SOURCE == "schedule" && $SCHEDULE_TYPE == "nightly"'
|
|
|
|
.if-security-schedule: &if-security-schedule
|
|
if: '$CI_PROJECT_NAMESPACE == "gitlab-org/security" && $CI_PIPELINE_SOURCE == "schedule"'
|
|
|
|
.if-foss-schedule: &if-foss-schedule
|
|
if: '$CI_PROJECT_PATH == "gitlab-org/gitlab-foss" && $CI_PIPELINE_SOURCE == "schedule"'
|
|
|
|
.if-dot-com-gitlab-org-schedule: &if-dot-com-gitlab-org-schedule
|
|
if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE == "gitlab-org" && $CI_PIPELINE_SOURCE == "schedule"'
|
|
|
|
.if-dot-com-ee-schedule-default-branch-maintenance: &if-dot-com-ee-schedule-default-branch-maintenance
|
|
if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_PATH == "gitlab-org/gitlab" && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH && $CI_PIPELINE_SOURCE == "schedule" && $SCHEDULE_TYPE == "maintenance"'
|
|
|
|
.if-dot-com-gitlab-org-default-branch: &if-dot-com-gitlab-org-default-branch
|
|
if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE == "gitlab-org" && $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH'
|
|
|
|
.if-dot-com-gitlab-org-merge-request: &if-dot-com-gitlab-org-merge-request
|
|
if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE == "gitlab-org" && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached")'
|
|
|
|
.if-dot-com-gitlab-org-and-security-merge-request: &if-dot-com-gitlab-org-and-security-merge-request
|
|
if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached")'
|
|
|
|
.if-dot-com-gitlab-org-and-security-merge-request-and-qa-tests-specified: &if-dot-com-gitlab-org-and-security-merge-request-and-qa-tests-specified
|
|
if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $QA_TESTS'
|
|
|
|
.if-dot-com-gitlab-org-and-security-merge-request-manual-ff-package-and-e2e: &if-dot-com-gitlab-org-and-security-merge-request-manual-ff-package-and-e2e
|
|
if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $QA_MANUAL_FF_PACKAGE_AND_QA'
|
|
|
|
.if-dot-com-gitlab-org-and-security-tag: &if-dot-com-gitlab-org-and-security-tag
|
|
if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_NAMESPACE =~ /^gitlab-org($|\/security$)/ && $CI_COMMIT_TAG'
|
|
|
|
.if-ruby2-branch: &if-ruby2-branch
|
|
if: '$CI_COMMIT_BRANCH == "ruby2"'
|
|
|
|
# For Security merge requests, the gitlab-release-tools-bot triggers a new
|
|
# pipeline for the "Pipelines for merged results" feature. If the pipeline
|
|
# fails, we notify release managers.
|
|
.if-security-pipeline-merge-result: &if-security-pipeline-merge-result
|
|
if: '$CI_PIPELINE_SOURCE == "merge_request_event" && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME == $CI_DEFAULT_BRANCH && $CI_PROJECT_NAMESPACE == "gitlab-org/security" && $GITLAB_USER_LOGIN == "gitlab-release-tools-bot"'
|
|
|
|
####################
|
|
# Changes patterns #
|
|
####################
|
|
.ci-patterns: &ci-patterns
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*"
|
|
- "scripts/rspec_helpers.sh"
|
|
|
|
.ci-build-images-patterns: &ci-build-images-patterns
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/build-images.gitlab-ci.yml"
|
|
|
|
.ci-review-patterns: &ci-review-patterns
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/frontend.gitlab-ci.yml"
|
|
- ".gitlab/ci/build-images.gitlab-ci.yml"
|
|
- ".gitlab/ci/review.gitlab-ci.yml"
|
|
- ".gitlab/ci/review-apps/**/*"
|
|
- "scripts/review_apps/**/*"
|
|
- "scripts/trigger-build.rb"
|
|
- "{,ee/,jh/}{bin,config}/**/*.rb"
|
|
|
|
.ci-templates-patterns: &ci-templates-patterns
|
|
- "lib/gitlab/ci/templates/**/*.gitlab-ci.yml"
|
|
|
|
.ci-qa-patterns: &ci-qa-patterns
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/frontend.gitlab-ci.yml"
|
|
- ".gitlab/ci/build-images.gitlab-ci.yml"
|
|
- ".gitlab/ci/qa.gitlab-ci.yml"
|
|
- ".gitlab/ci/package-and-test/*.yml"
|
|
- ".gitlab/ci/review-apps/qa.gitlab-ci.yml"
|
|
- ".gitlab/ci/review-apps/rules.gitlab-ci.yml"
|
|
|
|
.gitaly-patterns: &gitaly-patterns
|
|
- "GITALY_SERVER_VERSION"
|
|
- "lib/gitlab/setup_helper.rb"
|
|
|
|
.workhorse-patterns: &workhorse-patterns
|
|
- "GITLAB_WORKHORSE_VERSION"
|
|
- "workhorse/**/*"
|
|
- ".gitlab/ci/workhorse.gitlab-ci.yml"
|
|
- "spec/support/gitlab-git-test.git/**/*"
|
|
|
|
.yaml-lint-patterns: &yaml-lint-patterns
|
|
- "**/*.{yml,yaml}{,.*}"
|
|
|
|
.lint-pipeline-yaml-patterns: &lint-pipeline-yaml-patterns
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*.yml"
|
|
- "lib/gitlab/ci/templates/**/*.yml"
|
|
- "data/deprecations/**/*.yml"
|
|
- "data/removals/**/*.yml"
|
|
- "data/whats_new/**/*.yml"
|
|
|
|
.lint-metrics-yaml-patterns: &lint-metrics-yaml-patterns
|
|
- "config/metrics/**/*.yml"
|
|
|
|
.docs-patterns: &docs-patterns
|
|
- ".gitlab/route-map.yml"
|
|
- "doc/**/*"
|
|
- ".markdownlint.yml"
|
|
- "scripts/lint-doc.sh"
|
|
- ".gitlab/ci/docs.gitlab-ci.yml"
|
|
|
|
.docs-blueprints-patterns: &docs-blueprints-patterns
|
|
- "doc/architecture/blueprints/**/*"
|
|
- "scripts/lint-docs-blueprints.rb"
|
|
- ".gitlab/ci/docs.gitlab-ci.yml"
|
|
|
|
.docs-deprecations-and-removals-patterns: &docs-deprecations-and-removals-patterns
|
|
- "doc/update/deprecations.md"
|
|
- "doc/update/removals.md"
|
|
- "data/deprecations/**/*"
|
|
- "data/removals/**/*"
|
|
- "tooling/docs/**/*"
|
|
- "lib/tasks/gitlab/docs/compile_deprecations.rake"
|
|
|
|
.bundler-patterns: &bundler-patterns
|
|
- '{Gemfile.lock,*/Gemfile.lock,*/*/Gemfile.lock}'
|
|
|
|
.nodejs-patterns: &nodejs-patterns
|
|
- '{package.json,*/package.json,*/*/package.json}'
|
|
- '{yarn.lock,*/yarn.lock,*/*/yarn.lock}'
|
|
|
|
.python-patterns: &python-patterns
|
|
- '{requirements.txt,*/requirements.txt,*/*/requirements.txt}'
|
|
- '{requirements.pip,*/requirements.pip,*/*/requirements.pip}'
|
|
- '{Pipfile,*/Pipfile,*/*/Pipfile}'
|
|
- '{requires.txt,*/requires.txt,*/*/requires.txt}'
|
|
- '{setup.py,*/setup.py,*/*/setup.py}'
|
|
|
|
.dependency-patterns: &dependency-patterns
|
|
- '{Gemfile.lock,*/Gemfile.lock,*/*/Gemfile.lock}'
|
|
- '{composer.lock,*/composer.lock,*/*/composer.lock}'
|
|
- '{gems.locked,*/gems.locked,*/*/gems.locked}'
|
|
- '{go.sum,*/go.sum,*/*/go.sum}'
|
|
- '{npm-shrinkwrap.json,*/npm-shrinkwrap.json,*/*/npm-shrinkwrap.json}'
|
|
- '{package-lock.json,*/package-lock.json,*/*/package-lock.json}'
|
|
- '{yarn.lock,*/yarn.lock,*/*/yarn.lock}'
|
|
- '{packages.lock.json,*/packages.lock.json,*/*/packages.lock.json}'
|
|
- '{conan.lock,*/conan.lock,*/*/conan.lock}'
|
|
|
|
.frontend-dependency-patterns: &frontend-dependency-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- "config/webpack.config.js"
|
|
- "config/helpers/*.js"
|
|
|
|
.frontend-build-patterns: &frontend-build-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- ".browserslistrc"
|
|
- "babel.config.js"
|
|
- "config/webpack.config.js"
|
|
- "config/**/*.js"
|
|
- "{,ee/,jh/}app/assets/**/*"
|
|
- "vendor/assets/**/*"
|
|
|
|
# This list should match the list in Tasks::Gitlab::Assets.assets_impacting_compilation
|
|
.assets-compilation-patterns: &assets-compilation-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- ".browserslistrc"
|
|
- "babel.config.js"
|
|
- "config/webpack.config.js"
|
|
- "*.js"
|
|
- "config/**/*.js"
|
|
- "locale/**/gitlab.po"
|
|
- "{,ee/,jh/}app/assets/**/*"
|
|
- "fixtures/emojis/**/*"
|
|
- "vendor/assets/**/*"
|
|
|
|
.frontend-patterns-for-as-if-foss: &frontend-patterns-for-as-if-foss
|
|
- "{package.json,yarn.lock}"
|
|
- ".browserslistrc"
|
|
- "babel.config.js"
|
|
- "jest.config.{base,integration,unit}.js"
|
|
- ".stylelintrc"
|
|
- "Dockerfile.assets"
|
|
- "config/**/*.js"
|
|
- "vendor/assets/**/*"
|
|
- "{app/assets,app/components,app/helpers,app/presenters,app/views,locale,public,spec/frontend,storybook,symbol}/**/*"
|
|
|
|
.initializers-patterns: &initializers-patterns
|
|
- "{,ee/,jh/}config/initializers/**/*"
|
|
|
|
.controllers-patterns: &controllers-patterns
|
|
- "{,ee/,jh/}{app/controllers}/**/*"
|
|
|
|
.models-patterns: &models-patterns
|
|
- "{,ee/,jh/}{app/models}/**/*"
|
|
|
|
.lib-gitlab-patterns: &lib-gitlab-patterns
|
|
- "{,ee/,jh/}lib/{,ee/,jh/}gitlab/**/*"
|
|
|
|
.startup-css-patterns: &startup-css-patterns
|
|
- "{,ee/,jh/}app/assets/stylesheets/startup/**/*"
|
|
|
|
# Backend patterns + .ci-patterns
|
|
.backend-patterns: &backend-patterns
|
|
- "{,jh/}Gemfile{,.lock}"
|
|
- "Rakefile"
|
|
- "config.ru"
|
|
# List explicitly all the app/ dirs that are backend (i.e. all except app/assets).
|
|
- "{,ee/,jh/}{app/channels,app/components,app/controllers,app/finders,app/graphql,app/helpers,app/mailers,app/models,app/policies,app/presenters,app/serializers,app/services,app/uploaders,app/validators,app/views,app/workers}/**/*"
|
|
- "{,ee/,jh/}{bin,config,db,generator_templates,lib}/**/*"
|
|
- "{,ee/,jh/}spec/**/*"
|
|
# CI changes
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*"
|
|
- "*_VERSION"
|
|
- "scripts/rspec_helpers.sh"
|
|
# Mapped patterns (see tests.yml)
|
|
- "data/whats_new/*.yml"
|
|
- "doc/index.md"
|
|
|
|
.search-backend-patterns: &search-backend-patterns
|
|
- "{,jh/}Gemfile.lock"
|
|
- "GITLAB_ELASTICSEARCH_INDEXER_VERSION"
|
|
# List explicitly all the app/ dirs that are backend (i.e. all except app/assets).
|
|
- "{,ee/,jh/}{app/channels,app/components,app/controllers,app/finders,app/graphql,app/helpers,app/mailers,app/models,app/policies,app/presenters,app/serializers,app/services,app/uploaders,app/validators,app/views,app/workers}/**/*"
|
|
- "{,ee/,jh/}{bin,config,db,generator_templates,lib}/**/*"
|
|
- "{,ee/,jh/}spec/**/*"
|
|
|
|
# DB patterns + .ci-patterns
|
|
.db-patterns: &db-patterns
|
|
- "{,ee/,jh/}{,spec/}{db,migrations}/**/*"
|
|
- "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/background_migration{,_spec}.rb"
|
|
- "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/background_migration/**/*"
|
|
- "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/database{,_spec}.rb"
|
|
- "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/database/**/*"
|
|
- "{,ee/,jh/}spec/support/helpers/database/**/*"
|
|
- "{,ee/,jh/}spec/support/helpers/migrations_helpers/**/*"
|
|
- "lib/api/admin/batched_background_migrations.rb"
|
|
- "lib/gitlab/markdown_cache/active_record/**/*"
|
|
- "spec/requests/api/admin/batched_background_migrations_spec.rb"
|
|
- "config/prometheus/common_metrics.yml" # Used by Gitlab::DatabaseImporters::CommonMetrics::Importer
|
|
- "{,ee/,jh/}app/models/project_statistics.rb" # Used to calculate sizes in migration specs
|
|
# Gitaly has interactions with background migrations: https://gitlab.com/gitlab-org/gitlab/-/issues/336538
|
|
- "GITALY_SERVER_VERSION"
|
|
- "lib/gitlab/setup_helper.rb"
|
|
# CI changes
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*"
|
|
|
|
# DB backup patterns
|
|
.db-backup-patterns: &db-backup-patterns
|
|
- "lib/backup/**/*"
|
|
- "lib/tasks/gitlab/backup.rake"
|
|
|
|
.db-library-patterns: &db-library-patterns
|
|
- "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/database/**/*"
|
|
- "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/database{,_spec}.rb"
|
|
- "{,ee/,jh/}spec/support/helpers/database/**/*"
|
|
|
|
.backstage-patterns: &backstage-patterns
|
|
- "Dangerfile"
|
|
- "danger/**/*"
|
|
- "{,ee/,jh/}fixtures/**/*"
|
|
- "{,ee/,jh/}rubocop/**/*"
|
|
- "{,ee/,jh/}spec/**/*"
|
|
- "{,spec/}tooling/**/*"
|
|
|
|
.qa-patterns: &qa-patterns
|
|
- ".dockerignore"
|
|
- "{,jh/}qa/**/*"
|
|
|
|
# Code patterns + .ci-patterns
|
|
.code-patterns: &code-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- ".browserslistrc"
|
|
- "babel.config.js"
|
|
- "jest.config.{base,integration,unit}.js"
|
|
- ".stylelintrc"
|
|
- "Dockerfile.assets"
|
|
- "vendor/assets/**/*"
|
|
- ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
|
|
- ".gitlab-ci.yml"
|
|
- "*_VERSION"
|
|
- "{,jh/}Gemfile{,.lock}"
|
|
- "Rakefile"
|
|
- "tests.yml"
|
|
- "config.ru"
|
|
- "{,ee/,jh/}{app,bin,config,db,generator_templates,haml_lint,lib,locale,public,scripts,symbol,vendor}/**/*"
|
|
- "doc/api/graphql/reference/*" # Files in this folder are auto-generated
|
|
# CI changes
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*"
|
|
# Mapped patterns (see tests.yml)
|
|
- "data/whats_new/*.yml"
|
|
- "doc/index.md"
|
|
|
|
# .code-patterns + .backstage-patterns
|
|
.code-backstage-patterns: &code-backstage-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- ".browserslistrc"
|
|
- "babel.config.js"
|
|
- "jest.config.{base,integration,unit}.js"
|
|
- ".stylelintrc"
|
|
- "Dockerfile.assets"
|
|
- "vendor/assets/**/*"
|
|
- ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
|
|
- "*_VERSION"
|
|
- "{,jh/}Gemfile{,.lock}"
|
|
- "Rakefile"
|
|
- "tests.yml"
|
|
- "config.ru"
|
|
- "{,ee/,jh/}{app,bin,config,db,generator_templates,haml_lint,lib,locale,public,scripts,storybook,symbol,vendor}/**/*"
|
|
- "doc/api/graphql/reference/*" # Files in this folder are auto-generated
|
|
# CI changes
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*"
|
|
# Backstage changes
|
|
- "Dangerfile"
|
|
- "danger/**/*"
|
|
- "{,ee/,jh/}fixtures/**/*"
|
|
- "{,ee/,jh/}rubocop/**/*"
|
|
- "{,ee/,jh/}spec/**/*"
|
|
- "{,spec/}tooling/**/*"
|
|
# Mapped patterns (see tests.yml)
|
|
- "data/whats_new/*.yml"
|
|
- "doc/index.md"
|
|
|
|
# .code-patterns + .qa-patterns
|
|
.code-qa-patterns: &code-qa-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- ".browserslistrc"
|
|
- "babel.config.js"
|
|
- "jest.config.{base,integration,unit}.js"
|
|
- ".stylelintrc"
|
|
- "Dockerfile.assets"
|
|
- "vendor/assets/**/*"
|
|
- ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
|
|
- "*_VERSION"
|
|
- "{,jh/}Gemfile{,.lock}"
|
|
- "Rakefile"
|
|
- "tests.yml"
|
|
- "config.ru"
|
|
- "{,ee/,jh/}{app,bin,config,db,generator_templates,haml_lint,lib,locale,public,scripts,symbol,vendor}/**/*"
|
|
- "doc/api/graphql/reference/*" # Files in this folder are auto-generated
|
|
# CI changes
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*"
|
|
# QA changes
|
|
- ".dockerignore"
|
|
- "{,jh/}qa/**/*"
|
|
# Mapped patterns (see tests.yml)
|
|
- "data/whats_new/*.yml"
|
|
- "doc/index.md"
|
|
|
|
# .code-patterns + .backstage-patterns + .qa-patterns
|
|
.code-backstage-qa-patterns: &code-backstage-qa-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- ".browserslistrc"
|
|
- "babel.config.js"
|
|
- "jest.config.{base,integration,unit}.js"
|
|
- ".stylelintrc"
|
|
- "Dockerfile.assets"
|
|
- "vendor/assets/**/*"
|
|
- ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
|
|
- ".gitlab-ci.yml"
|
|
- "*_VERSION"
|
|
- "{,jh/}Gemfile{,.lock}"
|
|
- "Rakefile"
|
|
- "tests.yml"
|
|
- "config.ru"
|
|
- "{,ee/,jh/}{app,bin,config,db,generator_templates,haml_lint,lib,locale,public,scripts,storybook,symbol,vendor}/**/*"
|
|
- "doc/api/graphql/reference/*" # Files in this folder are auto-generated
|
|
# CI changes
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*"
|
|
# Backstage changes
|
|
- "Dangerfile"
|
|
- "danger/**/*"
|
|
- "{,ee/,jh/}fixtures/**/*"
|
|
- "{,ee/,jh/}rubocop/**/*"
|
|
- "{,ee/,jh/}spec/**/*"
|
|
- "{,spec/}tooling/**/*"
|
|
# QA changes
|
|
- ".dockerignore"
|
|
- "{,jh/}qa/**/*"
|
|
# Mapped patterns (see tests.yml)
|
|
- "data/whats_new/*.yml"
|
|
- "doc/index.md"
|
|
|
|
# .code-backstage-qa-patterns + .workhorse-patterns
|
|
# NOTE: `setup-test-env-patterns` intentionally does not include docs files, because this would
|
|
# result in docs-only pipelines having failures of jobs which use `setup-test-env-patterns`
|
|
# in their rules and thus require `setup-test-env`, which isn't present in docs-only pipelines.
|
|
.setup-test-env-patterns: &setup-test-env-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- ".browserslistrc"
|
|
- "babel.config.js"
|
|
- "jest.config.{base,integration,unit}.js"
|
|
- ".stylelintrc"
|
|
- "Dockerfile.assets"
|
|
- "vendor/assets/**/*"
|
|
- ".{eslintignore,gitattributes,nvmrc,prettierrc,stylelintrc,yamllint}"
|
|
- ".gitlab-ci.yml"
|
|
- "*_VERSION"
|
|
- "{,jh/}Gemfile{,.lock}"
|
|
- "Rakefile"
|
|
- "tests.yml"
|
|
- "config.ru"
|
|
- "{,ee/,jh/}{app,bin,config,db,generator_templates,haml_lint,lib,locale,public,scripts,storybook,symbol,vendor}/**/*"
|
|
- "doc/api/graphql/reference/*" # Files in this folder are auto-generated
|
|
# Mapped patterns (see tests.yml)
|
|
- "data/whats_new/*.yml"
|
|
- "doc/index.md"
|
|
# CI changes
|
|
- ".gitlab-ci.yml"
|
|
- ".gitlab/ci/**/*"
|
|
# Backstage changes
|
|
- "Dangerfile"
|
|
- "danger/**/*"
|
|
- "{,ee/,jh/}fixtures/**/*"
|
|
- "{,ee/,jh/}rubocop/**/*"
|
|
- "{,ee/,jh/}spec/**/*"
|
|
- "{,spec/}tooling/**/*"
|
|
# QA changes
|
|
- ".dockerignore"
|
|
- "{,jh/}qa/**/*"
|
|
# Workhorse changes
|
|
- "GITLAB_WORKHORSE_VERSION"
|
|
- "workhorse/**/*"
|
|
- ".gitlab/ci/workhorse.gitlab-ci.yml"
|
|
# CI Templates changes
|
|
- "scripts/lint_templates_bash.rb"
|
|
- "lib/gitlab/ci/templates/**/*.gitlab-ci.yml"
|
|
# GLFM specification changes
|
|
- "glfm_specification/**/*"
|
|
|
|
.static-analysis-patterns: &static-analysis-patterns
|
|
- ".{codeclimate,eslintrc,haml-lint,haml-lint_todo}.yml"
|
|
|
|
.rubocop-patterns: &rubocop-patterns
|
|
- ".{rubocop,rubocop_todo}.yml"
|
|
- ".rubocop_todo/**/*.yml"
|
|
- "{,ee/,jh/}rubocop/**/*" # We might be changing custom cops
|
|
- "{,ee/,jh/}Gemfile.lock" # This should include gitlab-styles, rubocop itself, and any plugins we might be using
|
|
- "lib/gitlab_edition.rb" # This is required in RuboCop::CodeReuseHelpers
|
|
- ".gitlab/ci/static-analysis.gitlab-ci.yml"
|
|
- "config/feature_categories.yml" # Used by RSpec/InvalidFeatureCategory
|
|
|
|
.danger-patterns: &danger-patterns
|
|
- "Dangerfile"
|
|
- "danger/**/*"
|
|
- "tooling/danger/**/*"
|
|
|
|
.core-backend-patterns: &core-backend-patterns
|
|
- "{,jh/}Gemfile{,.lock}"
|
|
- "{,ee/,jh/}config/**/*.rb"
|
|
|
|
.core-frontend-patterns: &core-frontend-patterns
|
|
- "{package.json,yarn.lock}"
|
|
- "babel.config.js"
|
|
- "jest.config.{base,integration,unit}.js"
|
|
- "config/helpers/**/*.js"
|
|
- "vendor/assets/javascripts/**/*"
|
|
|
|
.feature-flag-development-config-patterns: &feature-flag-development-config-patterns
|
|
- "{,ee/,jh/}config/feature_flags/{development,ops}/*.yml"
|
|
|
|
.glfm-patterns: &glfm-patterns
|
|
- ".gitlab/ci/rules.gitlab-ci.yml"
|
|
- "glfm_specification/**/*"
|
|
- "scripts/glfm/**/*"
|
|
- "scripts/lib/glfm/**/*"
|
|
|
|
##################
|
|
# Conditions set #
|
|
##################
|
|
|
|
.strict-ee-only-rules:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-jh
|
|
when: never
|
|
|
|
.as-if-jh-default-exclusion-rules:
|
|
rules:
|
|
- <<: *if-security-merge-request
|
|
when: never
|
|
- <<: *if-merge-request-targeting-stable-branch
|
|
when: never
|
|
- <<: *if-merge-request-labels-pipeline-expedite
|
|
when: never
|
|
|
|
.rails:rules:predictive-default-rules:
|
|
rules:
|
|
- <<: *if-merge-request-approved
|
|
when: never
|
|
- <<: *if-automated-merge-request
|
|
when: never
|
|
- <<: *if-security-merge-request
|
|
when: never
|
|
|
|
.rails:rules:run-search-tests:
|
|
rules:
|
|
- <<: *if-merge-request-labels-group-global-search
|
|
changes: *search-backend-patterns
|
|
- <<: *if-merge-request-labels-group-global-search
|
|
changes: *ci-patterns
|
|
|
|
.rails:rules:ee-and-foss-default-rules:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *core-backend-patterns
|
|
- <<: *if-automated-merge-request
|
|
changes: *backend-patterns
|
|
- <<: *if-security-merge-request
|
|
changes: *backend-patterns
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
|
|
.rails:rules:as-if-foss-migration-unit-integration:predictive-default-rules:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: *core-backend-patterns
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *ci-patterns
|
|
when: never
|
|
|
|
.rails:rules:unit-integration:predictive-default-rules:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
when: never
|
|
- !reference [".rails:rules:as-if-foss-migration-unit-integration:predictive-default-rules", rules]
|
|
|
|
.rails:rules:system-default-rules:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *core-backend-patterns
|
|
- <<: *if-merge-request
|
|
changes: *workhorse-patterns
|
|
- <<: *if-automated-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-security-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
|
|
.rails:rules:system:predictive-default-rules:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *core-backend-patterns
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *workhorse-patterns
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *ci-patterns
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:previous-failed-tests-default-rules:
|
|
rules:
|
|
- <<: *if-security-merge-request
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-patterns
|
|
|
|
################
|
|
# Shared rules #
|
|
################
|
|
.shared:rules:update-cache:
|
|
rules:
|
|
- <<: *if-schedule-maintenance
|
|
- <<: *if-security-schedule
|
|
- <<: *if-foss-schedule
|
|
- <<: *if-merge-request-labels-update-caches
|
|
|
|
.shared:rules:update-gitaly-binaries-cache:
|
|
rules:
|
|
- <<: *if-merge-request-labels-update-caches
|
|
- <<: *if-default-refs
|
|
changes: *gitaly-patterns
|
|
|
|
######################
|
|
# Build images rules #
|
|
######################
|
|
.build-images:rules:build-qa-image-merge-requests:
|
|
rules:
|
|
- <<: *if-not-canonical-namespace
|
|
when: never
|
|
- <<: *if-merge-request-targeting-stable-branch
|
|
- <<: *if-merge-request-labels-run-review-app
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *ci-build-images-patterns
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *code-qa-patterns
|
|
|
|
.build-images:rules:build-qa-image:
|
|
rules:
|
|
- !reference [".build-images:rules:build-qa-image-merge-requests", "rules"]
|
|
- <<: *if-auto-deploy-branches
|
|
variables:
|
|
ARCH: amd64,arm64
|
|
- <<: *if-default-branch-refs
|
|
variables:
|
|
ARCH: amd64,arm64
|
|
- <<: *if-tag
|
|
variables:
|
|
ARCH: amd64,arm64
|
|
# TODO: Remove once confirmed on a tag pipeline
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-schedule
|
|
variables:
|
|
ARCH: amd64,arm64
|
|
- <<: *if-force-ci
|
|
- <<: *if-ruby2-branch
|
|
|
|
.build-images:rules:build-qa-image-as-if-foss:
|
|
rules:
|
|
- !reference [".build-images:rules:build-qa-image-merge-requests", "rules"]
|
|
|
|
# We want to rebuild the master image when the full e2e test pipeline runs. Currently this happens on a 2 hour schedule.
|
|
.build-images:rules:build-qa-on-gdk-master-image:
|
|
rules:
|
|
- if: '$QA_RUN_TESTS_ON_GDK !~ /true|yes|1/i'
|
|
when: never
|
|
- <<: *if-not-canonical-namespace
|
|
when: never
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-dot-com-gitlab-org-schedule
|
|
variables:
|
|
ARCH: amd64,arm64
|
|
|
|
.build-images:rules:build-assets-image:
|
|
rules:
|
|
- <<: *if-not-canonical-namespace
|
|
when: never
|
|
- <<: *if-merge-request-targeting-stable-branch
|
|
- <<: *if-merge-request-labels-run-review-app
|
|
- <<: *if-auto-deploy-branches
|
|
- <<: *if-ruby2-branch
|
|
- <<: *if-default-refs
|
|
changes: *ci-build-images-patterns
|
|
- <<: *if-default-refs
|
|
changes: *code-qa-patterns
|
|
|
|
#################
|
|
# Caching rules #
|
|
#################
|
|
.caching:rules:cache-workhorse:
|
|
rules:
|
|
# That would run for any project that has a "maintenance" pipeline schedule
|
|
# but in fact, the cache package is only uploaded for gitlab.com/gitlab-org/gitlab and jihulab.com/gitlab-cn/gitlab
|
|
- <<: *if-schedule-maintenance
|
|
- <<: *if-dot-com-gitlab-org-default-branch
|
|
changes: ["workhorse/**/*"]
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes:
|
|
- ".gitlab/ci/caching.gitlab-ci.yml"
|
|
- "scripts/gitlab_component_helpers.sh"
|
|
when: manual
|
|
allow_failure: true
|
|
|
|
.caching:rules:cache-assets:
|
|
rules:
|
|
# The new strategy to cache assets as generic packages is experimental and can be disabled by removing the `CACHE_ASSETS_AS_PACKAGE` variable
|
|
- if: '$CACHE_ASSETS_AS_PACKAGE != "true"'
|
|
when: never
|
|
# That would run for any project that has a "maintenance" pipeline schedule
|
|
# but in fact, the cache package is only uploaded for gitlab.com/gitlab-org/gitlab and jihulab.com/gitlab-cn/gitlab
|
|
- <<: *if-schedule-maintenance
|
|
- <<: *if-dot-com-gitlab-org-default-branch
|
|
changes: *assets-compilation-patterns
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes:
|
|
- ".gitlab/ci/caching.gitlab-ci.yml"
|
|
- "scripts/gitlab_component_helpers.sh"
|
|
- "lib/tasks/gitlab/assets.rake"
|
|
when: manual
|
|
allow_failure: true
|
|
|
|
.caching:rules:packages-cleanup:
|
|
rules:
|
|
# The new strategy to cache assets as generic packages is experimental and can be disabled by removing the `CACHE_ASSETS_AS_PACKAGE` variable
|
|
- if: '$CACHE_ASSETS_AS_PACKAGE != "true"'
|
|
when: never
|
|
# That would run for any project that has a "maintenance" pipeline schedule
|
|
# but in fact, the cache package is only uploaded for gitlab.com/gitlab-org/gitlab and jihulab.com/gitlab-cn/gitlab
|
|
- <<: *if-schedule-maintenance
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes:
|
|
- ".gitlab/ci/caching.gitlab-ci.yml"
|
|
- "scripts/packages/automated_cleanup.rb"
|
|
when: manual
|
|
allow_failure: true
|
|
|
|
######################
|
|
# CI Templates Rules #
|
|
######################
|
|
.ci-templates:rules:shellcheck:
|
|
rules:
|
|
- changes: *ci-templates-patterns
|
|
- changes:
|
|
- scripts/lint_templates_bash.rb
|
|
|
|
##################
|
|
# Delivery rules #
|
|
##################
|
|
.delivery:rules:security-pipeline-merge-result-failure:
|
|
rules:
|
|
- <<: *if-security-pipeline-merge-result
|
|
when: on_failure
|
|
|
|
######################
|
|
# Dev fixtures rules #
|
|
######################
|
|
.dev-fixtures:rules:ee-and-foss:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.dev-fixtures:rules:ee-only:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
##############
|
|
# Docs rules #
|
|
##############
|
|
.docs:rules:review-docs:
|
|
rules:
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *docs-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
|
|
.docs:rules:docs-lint:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *docs-patterns
|
|
|
|
.docs:rules:docs-blueprints-lint:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *docs-blueprints-patterns
|
|
|
|
.docs:rules:deprecations-and-removals:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *docs-deprecations-and-removals-patterns
|
|
|
|
##################
|
|
# GLFM rules #
|
|
##################
|
|
.glfm:rules:glfm-verify:
|
|
# NOTES ON RULES:
|
|
# 1. We only run this job in EE because some of the markdown examples in the generated files depend
|
|
# on EE-only features. This means that it may fail when it is first run in a full EE pipeline.
|
|
# 2. We run this job for the `.setup-test-env-patterns` subset of file changes because:
|
|
# A. There are potentially many different source files within the codebase which could
|
|
# change the contents of the generated GLFM files, and it is therefore safer to always
|
|
# run this job to ensure that no changes are missed.
|
|
# B. The `.setup-test-env-patterns` restriction is needed because the job `needs` the
|
|
# `setup-test-env` job.
|
|
# See more context on each rule in the inline comments below:
|
|
rules:
|
|
# The `glfm-verify` job has dependencies on EE, so only run it for EE
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
# If any of the files that are DIRECTLY related to generating or managing the GLFM specification change,
|
|
# run `glfm-verify` to get quick feedback on any needed updates, even if the MR is not yet approved
|
|
- changes: *glfm-patterns
|
|
# Otherwise do not run `glfm-verify` if the MR is not approved
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
# If we passed all the previous rules, run `glfm-verify` if there are any changes that could impact `glfm-verify`.
|
|
# This could potentially be a wide range of files, so we reuse `setup-test-env-patterns`, which includes
|
|
# almost all app files except docs files.
|
|
- changes: *setup-test-env-patterns
|
|
# If we are forcing all rspec to run, run this job too.
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
##################
|
|
# GraphQL rules #
|
|
##################
|
|
.graphql:rules:graphql-verify:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
|
|
##################
|
|
# Frontend rules #
|
|
##################
|
|
|
|
.frontend:rules:predictive-default-rules:
|
|
rules:
|
|
- <<: *if-merge-request-approved
|
|
when: never
|
|
- <<: *if-automated-merge-request
|
|
when: never
|
|
- <<: *if-security-merge-request
|
|
when: never
|
|
|
|
.frontend:rules:compile-production-assets:
|
|
rules:
|
|
- <<: *if-not-canonical-namespace
|
|
when: never
|
|
- <<: *if-merge-request-targeting-stable-branch
|
|
- <<: *if-merge-request-labels-run-review-app
|
|
- <<: *if-auto-deploy-branches
|
|
- <<: *if-ruby2-branch
|
|
- <<: *if-default-refs
|
|
changes: *ci-build-images-patterns
|
|
- <<: *if-default-refs
|
|
changes: *code-qa-patterns
|
|
- <<: *if-default-refs
|
|
changes: *workhorse-patterns
|
|
|
|
.frontend:rules:compile-test-assets:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-default-refs
|
|
changes: *workhorse-patterns
|
|
|
|
.frontend:rules:compile-test-assets-as-if-foss:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request-labels-frontend-and-feature-flag
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-default-refs
|
|
changes: *startup-css-patterns
|
|
- <<: *if-default-refs
|
|
changes: *workhorse-patterns
|
|
|
|
.frontend:rules:default-frontend-jobs:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.frontend:rules:default-frontend-jobs-as-if-foss:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- <<: *if-security-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *startup-css-patterns
|
|
- <<: *if-merge-request
|
|
changes: *frontend-patterns-for-as-if-foss
|
|
|
|
.frontend:rules:frontend_fixture-as-if-foss:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- !reference [".frontend:rules:default-frontend-jobs-as-if-foss", rules]
|
|
- <<: *if-merge-request-labels-run-all-jest
|
|
- <<: *if-merge-request-labels-frontend-and-feature-flag
|
|
- <<: *if-merge-request
|
|
changes: *frontend-patterns-for-as-if-foss
|
|
|
|
.frontend:rules:jest:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-all-jest
|
|
- <<: *if-merge-request-labels-frontend-and-feature-flag
|
|
- <<: *if-merge-request
|
|
changes: *frontend-dependency-patterns
|
|
- <<: *if-merge-request
|
|
changes: [".gitlab/ci/rules.gitlab-ci.yml", ".gitlab/ci/frontend.gitlab-ci.yml"]
|
|
- <<: *if-automated-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-security-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.frontend:rules:jest:predictive:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
changes: *code-backstage-patterns
|
|
- !reference [".frontend:rules:predictive-default-rules", rules]
|
|
- <<: *if-merge-request-labels-run-all-jest
|
|
when: never
|
|
- <<: *if-merge-request-labels-frontend-and-feature-flag
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *frontend-dependency-patterns
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: [".gitlab/ci/rules.gitlab-ci.yml", ".gitlab/ci/frontend.gitlab-ci.yml"]
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-patterns
|
|
|
|
.frontend:rules:jest:as-if-foss:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
- <<: *if-merge-request-labels-run-all-jest
|
|
- <<: *if-merge-request
|
|
changes: *frontend-dependency-patterns
|
|
- <<: *if-security-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *frontend-patterns-for-as-if-foss
|
|
|
|
.frontend:rules:jest:predictive:as-if-foss:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- !reference [".frontend:rules:predictive-default-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-all-jest
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *frontend-dependency-patterns
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *frontend-patterns-for-as-if-foss
|
|
|
|
.frontend:rules:eslint-as-if-foss:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
- <<: *if-merge-request
|
|
changes: *frontend-patterns-for-as-if-foss
|
|
|
|
.frontend:rules:coverage-frontend:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-pipeline-expedite
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-default-branch-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.frontend:rules:bundle-size-review:
|
|
rules:
|
|
- <<: *if-not-canonical-namespace
|
|
when: never
|
|
- <<: *if-default-branch-refs
|
|
changes: *frontend-build-patterns
|
|
allow_failure: true
|
|
- if: '$DANGER_GITLAB_API_TOKEN && ($CI_MERGE_REQUEST_EVENT_TYPE == "merged_result" || $CI_MERGE_REQUEST_EVENT_TYPE == "detached") && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME == $CI_DEFAULT_BRANCH'
|
|
changes: *frontend-build-patterns
|
|
allow_failure: true
|
|
|
|
################
|
|
# Memory rules #
|
|
################
|
|
.memory:rules:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-patterns
|
|
|
|
##########
|
|
# Notify #
|
|
##########
|
|
.notify:rules:notify-pipeline-failure:
|
|
rules:
|
|
# Don't report child pipeline failures
|
|
- if: '$CI_PIPELINE_SOURCE == "parent_pipeline"'
|
|
when: never
|
|
- if: '$CI_SLACK_WEBHOOK_URL && $NOTIFY_PIPELINE_FAILURE_CHANNEL'
|
|
when: on_failure
|
|
allow_failure: true
|
|
|
|
###############
|
|
# Pages rules #
|
|
###############
|
|
.pages:rules:
|
|
rules:
|
|
- <<: *if-dot-com-ee-schedule-default-branch-maintenance
|
|
|
|
############
|
|
# QA rules #
|
|
############
|
|
.qa:rules:internal:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *qa-patterns
|
|
|
|
.qa:rules:ee-and-foss:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-qa-patterns
|
|
|
|
.qa:rules:as-if-foss:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- <<: *if-security-merge-request
|
|
changes: *code-qa-patterns
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.qa:rules:internal-as-if-foss:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- <<: *if-default-refs
|
|
changes: *qa-patterns
|
|
|
|
.qa:rules:determine-e2e-tests:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-targeting-stable-branch
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *code-backstage-qa-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-schedule
|
|
allow_failure: true
|
|
- <<: *if-force-ci
|
|
allow_failure: true
|
|
- <<: *if-ruby2-branch
|
|
|
|
.qa:rules:package-and-test-mrs:
|
|
rules:
|
|
- <<: *if-not-canonical-namespace
|
|
when: never
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-pipeline-expedite
|
|
when: never
|
|
- <<: *if-merge-request-targeting-stable-branch
|
|
allow_failure: true
|
|
- <<: *if-ruby2-branch
|
|
allow_failure: true
|
|
- <<: *if-merge-request-labels-run-all-e2e
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request-manual-ff-package-and-e2e
|
|
changes: *feature-flag-development-config-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *feature-flag-development-config-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *initializers-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *nodejs-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *ci-qa-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *qa-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request-and-qa-tests-specified
|
|
changes: *code-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-and-security-merge-request
|
|
changes: *code-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-force-ci
|
|
when: manual
|
|
allow_failure: true
|
|
|
|
.qa:rules:package-and-test:
|
|
rules:
|
|
- !reference [".qa:rules:package-and-test-mrs", rules]
|
|
- <<: *if-dot-com-gitlab-org-schedule
|
|
allow_failure: true
|
|
variables:
|
|
SKIP_REPORT_IN_ISSUES: "false"
|
|
PROCESS_TEST_RESULTS: "true"
|
|
KNAPSACK_GENERATE_REPORT: "true"
|
|
QA_SAVE_TEST_METRICS: "true"
|
|
QA_EXPORT_TEST_METRICS: "false" # on main runs, metrics are exported to separate bucket via rake task for better consistency
|
|
|
|
.qa:rules:e2e:test-on-gdk:
|
|
rules:
|
|
- if: '$QA_RUN_TESTS_ON_GDK !~ /true|yes|1/i'
|
|
when: never
|
|
- !reference [".qa:rules:package-and-test", rules]
|
|
|
|
###############
|
|
# Rails rules #
|
|
###############
|
|
.rails:rules:setup-test-env:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *setup-test-env-patterns
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.rails:rules:single-db:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-single-db
|
|
- <<: *if-merge-request
|
|
changes: *db-patterns
|
|
- <<: *if-default-branch-schedule-nightly
|
|
|
|
.rails:rules:db:check-migrations-single-db:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-single-db
|
|
- <<: *if-merge-request
|
|
changes: *db-patterns
|
|
|
|
.rails:rules:db-backup:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-default-refs
|
|
changes: *db-backup-patterns
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *db-patterns
|
|
|
|
.rails:rules:db-rollback:
|
|
rules:
|
|
- !reference [".rails:rules:ee-and-foss-migration", rules]
|
|
- <<: *if-default-refs
|
|
changes: *initializers-patterns
|
|
- <<: *if-default-refs
|
|
changes:
|
|
- "{,ee/,jh/}{,spec/}lib/{,ee/,jh/}gitlab/content_security_policy/config_loader{,_spec}.rb"
|
|
|
|
.rails:rules:praefect-with-db:
|
|
rules:
|
|
- if: '$CI_MERGE_REQUEST_LABELS =~ /pipeline:run-praefect-with-db/'
|
|
allow_failure: true
|
|
|
|
.rails:rules:ee-and-foss-migration:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *core-backend-patterns
|
|
# When DB schema changes, many migrations spec may be affected. However, the test mapping from Crystalball does not map db change to a specific migration spec well.
|
|
# See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/68840.
|
|
- <<: *if-merge-request
|
|
changes: *db-patterns
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *db-patterns
|
|
|
|
.rails:rules:ee-and-foss-migration:predictive:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
changes: *db-patterns
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:unit-integration:predictive-default-rules", rules]
|
|
# When DB schema changes, many migrations spec may be affected. However, the test mapping from Crystalball does not map db change to a specific migration spec well.
|
|
# See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/68840.
|
|
- <<: *if-merge-request
|
|
changes: *db-patterns
|
|
when: never
|
|
|
|
.rails:rules:ee-and-foss-background-migration:
|
|
rules:
|
|
- !reference [".rails:rules:ee-and-foss-migration", rules]
|
|
- <<: *if-default-refs
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-and-foss-background-migration:predictive:
|
|
rules:
|
|
- !reference [".rails:rules:ee-and-foss-migration:predictive", rules]
|
|
- <<: *if-merge-request
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-and-foss-mr-with-migration:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: *db-patterns
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.rails:rules:db:gitlabcom-database-testing:
|
|
rules:
|
|
- if: '$GITLABCOM_DATABASE_TESTING_TRIGGER_TOKEN == null'
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *db-patterns
|
|
when: manual
|
|
|
|
.rails:rules:ee-and-foss-unit:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:ee-and-foss-default-rules", rules]
|
|
- <<: *if-default-refs
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-and-foss-unit:predictive:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
changes: *backend-patterns
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:unit-integration:predictive-default-rules", rules]
|
|
- <<: *if-merge-request
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-and-foss-integration:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:ee-and-foss-default-rules", rules]
|
|
- <<: *if-default-refs
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-and-foss-integration:predictive:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
changes: *backend-patterns
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:unit-integration:predictive-default-rules", rules]
|
|
- <<: *if-merge-request
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-and-foss-system:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:system-default-rules", rules]
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:ee-and-foss-system:predictive:
|
|
rules:
|
|
- <<: *if-fork-merge-request
|
|
changes: *code-backstage-patterns
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:system:predictive-default-rules", rules]
|
|
|
|
.rails:rules:ee-and-foss-fast_spec_helper:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *backend-patterns
|
|
- <<: *if-default-refs
|
|
changes: *core-backend-patterns
|
|
|
|
.rails:rules:code-backstage-qa:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.rails:rules:ee-only-migration:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *core-backend-patterns
|
|
# When DB schema changes, many migrations spec may be affected. However, the test mapping from Crystalball does not map db change to a specific migration spec well.
|
|
# See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/68840.
|
|
- <<: *if-merge-request
|
|
changes: *db-patterns
|
|
- <<: *if-automated-merge-request
|
|
changes: *db-patterns
|
|
- <<: *if-security-merge-request
|
|
changes: *db-patterns
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *db-patterns
|
|
|
|
.rails:rules:ee-only-migration:predictive:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:unit-integration:predictive-default-rules", rules]
|
|
# When DB schema changes, many migrations spec may be affected. However, the test mapping from Crystalball does not map db change to a specific migration spec well.
|
|
# See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/68840.
|
|
- <<: *if-merge-request
|
|
changes: *db-patterns
|
|
when: never
|
|
|
|
.rails:rules:ee-only-background-migration:
|
|
rules:
|
|
- !reference [".rails:rules:ee-only-migration", rules]
|
|
- <<: *if-default-refs
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-only-background-migration:predictive:
|
|
rules:
|
|
- !reference [".rails:rules:ee-only-migration:predictive", rules]
|
|
- <<: *if-merge-request
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-only-unit:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:ee-and-foss-default-rules", rules]
|
|
- <<: *if-default-refs
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-only-unit:predictive:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
changes: *backend-patterns
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:unit-integration:predictive-default-rules", rules]
|
|
- <<: *if-merge-request
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-only-integration:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:ee-and-foss-default-rules", rules]
|
|
- <<: *if-default-refs
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-only-integration:predictive:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
changes: *backend-patterns
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:unit-integration:predictive-default-rules", rules]
|
|
- <<: *if-merge-request
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:ee-only-system:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:system-default-rules", rules]
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:ee-only-system:predictive:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
changes: *code-backstage-patterns
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:system:predictive-default-rules", rules]
|
|
|
|
.rails:rules:as-if-foss-migration:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *core-backend-patterns
|
|
# When DB schema changes, many migrations spec may be affected. However, the test mapping from Crystalball does not map db change to a specific migration spec well.
|
|
# See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/68840.
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *db-patterns
|
|
- <<: *if-automated-merge-request
|
|
changes: *db-patterns
|
|
- <<: *if-security-merge-request
|
|
changes: *db-patterns
|
|
- <<: *if-merge-request-not-approved
|
|
when: never
|
|
|
|
.rails:rules:as-if-foss-migration:predictive:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:as-if-foss-migration-unit-integration:predictive-default-rules", rules]
|
|
# When DB schema changes, many migrations spec may be affected. However, the test mapping from Crystalball does not map db change to a specific migration spec well.
|
|
# See https://gitlab.com/gitlab-org/gitlab/-/merge_requests/68840.
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *db-patterns
|
|
when: never
|
|
|
|
.rails:rules:as-if-foss-background-migration:
|
|
rules:
|
|
- !reference [".rails:rules:as-if-foss-migration", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:as-if-foss-background-migration:predictive:
|
|
rules:
|
|
- !reference [".rails:rules:as-if-foss-migration:predictive", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:as-if-foss-unit:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:ee-and-foss-default-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:as-if-foss-unit:predictive:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:as-if-foss-migration-unit-integration:predictive-default-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:as-if-foss-integration:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:ee-and-foss-default-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:as-if-foss-integration:predictive:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- !reference [".rails:rules:as-if-foss-migration-unit-integration:predictive-default-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:as-if-foss-system:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:system-default-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:as-if-foss-system:predictive:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-fork-merge-request
|
|
when: never
|
|
- !reference [".rails:rules:predictive-default-rules", rules]
|
|
- <<: *if-merge-request
|
|
changes: *core-backend-patterns
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *workhorse-patterns
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *ci-patterns
|
|
when: never
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:ee-and-foss-db-library-code:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *db-library-patterns
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request-labels-run-on-pg11
|
|
|
|
.rails:rules:ee-mr-and-default-branch-only:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-default-branch-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:detect-tests:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-merge-request
|
|
changes: *workhorse-patterns
|
|
|
|
.rails:rules:detect-previous-failed-tests:
|
|
rules:
|
|
- !reference [".rails:rules:previous-failed-tests-default-rules", rules]
|
|
|
|
.rails:rules:rerun-previous-failed-tests:
|
|
rules:
|
|
- !reference [".rails:rules:previous-failed-tests-default-rules", rules]
|
|
|
|
.rails:rules:rspec-foss-impact:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
when: never
|
|
- <<: *if-security-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:rspec fail-fast:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-security-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:fail-pipeline-early:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-security-merge-request
|
|
changes: *code-backstage-patterns
|
|
when: on_failure
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *code-backstage-patterns
|
|
when: on_failure
|
|
|
|
.rails:rules:deprecations:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-default-branch-schedule-nightly
|
|
- <<: *if-ruby2-branch-schedule-nightly
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.rails:rules:rspec-coverage:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-pipeline-expedite
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-schedule-maintenance
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.rails:rules:rspec-undercoverage:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-pipeline-expedite
|
|
when: never
|
|
- <<: *if-merge-request-labels-skip-undercoverage
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
- <<: *if-merge-request
|
|
changes: *backend-patterns
|
|
|
|
.rails:rules:rspec-on-pg11:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-on-pg11
|
|
- !reference [".rails:rules:default-branch-schedule-nightly--code-backstage-default-rules", rules]
|
|
|
|
.rails:rules:default-branch-schedule-nightly--code-backstage-default-rules:
|
|
rules:
|
|
- <<: *if-default-branch-schedule-nightly
|
|
- <<: *if-merge-request
|
|
changes: [".gitlab/ci/rails.gitlab-ci.yml"]
|
|
|
|
.rails:rules:default-branch-schedule-nightly--code-backstage:
|
|
rules:
|
|
- !reference [".rails:rules:default-branch-schedule-nightly--code-backstage-default-rules", rules]
|
|
|
|
.rails:rules:default-branch-schedule-nightly--code-backstage-ee-only:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- !reference [".rails:rules:default-branch-schedule-nightly--code-backstage-default-rules", rules]
|
|
|
|
.rails:rules:rspec-feature-flags:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.rails:rules:flaky-tests-report:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-pipeline-expedite
|
|
when: never
|
|
- if: '$SKIP_FLAKY_TESTS_AUTOMATICALLY == "true" || $RETRY_FAILED_TESTS_IN_NEW_PROCESS == "true"'
|
|
changes: *code-backstage-patterns
|
|
when: always
|
|
|
|
#########################
|
|
# Static analysis rules #
|
|
#########################
|
|
|
|
.static-analysis:rules:static-analysis:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-default-refs
|
|
changes: *static-analysis-patterns
|
|
|
|
.static-analysis:rules:static-verification-with-database:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
|
|
.static-analysis:rules:rubocop:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *rubocop-patterns
|
|
variables:
|
|
RUN_ALL_RUBOCOP: "true"
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
|
|
.static-analysis:rules:qa:metadata-lint:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *qa-patterns
|
|
- <<: *if-default-refs
|
|
changes: [".gitlab/ci/static-analysis.gitlab-ci.yml"]
|
|
|
|
.static-analysis:rules:haml-lint:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *rubocop-patterns
|
|
- <<: *if-default-refs
|
|
changes: *static-analysis-patterns
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
|
|
.static-analysis:rules:haml-lint-ee:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *rubocop-patterns
|
|
- <<: *if-default-refs
|
|
changes: *static-analysis-patterns
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
|
|
.static-analysis:rules:static-analysis-as-if-foss:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-as-if-foss
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-security-merge-request
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-merge-request
|
|
changes: [".gitlab/ci/static-analysis.gitlab-ci.yml"]
|
|
- <<: *if-merge-request
|
|
changes: *static-analysis-patterns
|
|
|
|
.semgrep-appsec-custom-rules:rules:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-qa-patterns
|
|
|
|
.ping-appsec-for-sast-findings:rules:
|
|
rules:
|
|
# Requiring $CUSTOM_SAST_RULES_BOT_PAT prevents the bot from running on forks or CE
|
|
# Without it the script would fail too.
|
|
- if: "$CUSTOM_SAST_RULES_BOT_PAT == null"
|
|
when: never
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request
|
|
changes: *code-backstage-qa-patterns
|
|
|
|
#######################
|
|
# Vendored gems rules #
|
|
#######################
|
|
|
|
.vendor:rules:mail-smtp_pool:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/mail-smtp_pool/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:attr_encrypted:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/attr_encrypted/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:microsoft_graph_mailer:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/microsoft_graph_mailer/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:ipynbdiff:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/ipynbdiff/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:omniauth-azure-oauth2:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/omniauth-azure-oauth2/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:omniauth-cas3:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/omniauth-cas3/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:omniauth_crowd:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/omniauth_crowd/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:omniauth-gitlab:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/omniauth-gitlab/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:omniauth-salesforce:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/omniauth-salesforce/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:devise-pbkdf2-encryptable:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/devise-pbkdf2-encryptable/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:gitlab_active_record:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/gitlab_active_record/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.vendor:rules:bundler-checksum:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: ["vendor/gems/bundler-checksum/**/*"]
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
##################
|
|
# Releases rules #
|
|
##################
|
|
.releases:rules:canonical-dot-com-gitlab-stable-branch-only:
|
|
rules:
|
|
- if: '$CI_COMMIT_MESSAGE =~ /\[merge-train skip\]/'
|
|
when: never
|
|
- if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_PATH == "gitlab-org/gitlab" && $CI_COMMIT_REF_NAME =~ /^[\d-]+-stable-ee$/'
|
|
|
|
.releases:rules:canonical-dot-com-security-gitlab-stable-branch-only:
|
|
rules:
|
|
- if: '$CI_COMMIT_MESSAGE =~ /\[merge-train skip\]/'
|
|
when: never
|
|
- if: '$CI_SERVER_HOST == "gitlab.com" && $CI_PROJECT_PATH == "gitlab-org/security/gitlab" && $CI_COMMIT_REF_NAME =~ /^[\d-]+-stable-ee$/'
|
|
|
|
#################
|
|
# Reports rules #
|
|
#################
|
|
.reports:rules:code_quality:
|
|
rules:
|
|
- if: '$CODE_QUALITY_DISABLED'
|
|
when: never
|
|
# Run code_quality on master until https://gitlab.com/gitlab-org/gitlab/-/issues/363747 is resolved
|
|
- <<: *if-default-branch-refs
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-default-refs
|
|
changes: *docs-patterns
|
|
|
|
.reports:rules:brakeman-sast:
|
|
rules:
|
|
- if: $SAST_DISABLED
|
|
when: never
|
|
- if: $SAST_EXCLUDED_ANALYZERS =~ /brakeman/
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes:
|
|
- '**/*.rb'
|
|
- '**/Gemfile'
|
|
|
|
.reports:rules:semgrep-sast:
|
|
rules:
|
|
- if: $SAST_DISABLED
|
|
when: never
|
|
- if: $SAST_EXCLUDED_ANALYZERS =~ /semgrep/
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes:
|
|
- '**/*.py'
|
|
- '**/*.js'
|
|
- '**/*.jsx'
|
|
- '**/*.ts'
|
|
- '**/*.tsx'
|
|
- '**/*.c'
|
|
- '**/*.go'
|
|
- '**/*.rb'
|
|
|
|
.reports:rules:secret_detection:
|
|
rules:
|
|
- if: '$SECRET_DETECTION_DISABLED'
|
|
when: never
|
|
# Scan each commit on master to feed the Vulnerability Reports with detected secrets
|
|
- <<: *if-default-branch-refs
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-qa-patterns
|
|
|
|
.reports:rules:gemnasium-dependency_scanning:
|
|
rules:
|
|
- if: '$DEPENDENCY_SCANNING_DISABLED || $GITLAB_FEATURES !~ /\bdependency_scanning\b/ || $DS_EXCLUDED_ANALYZERS =~ /gemnasium([^-]|$)/'
|
|
when: never
|
|
# Run Dependency Scanning on master until https://gitlab.com/gitlab-org/gitlab/-/issues/361657 is resolved
|
|
- <<: *if-default-branch-refs
|
|
- <<: *if-default-refs
|
|
changes: *dependency-patterns
|
|
|
|
.reports:rules:gemnasium-python-dependency_scanning:
|
|
rules:
|
|
- if: '$DEPENDENCY_SCANNING_DISABLED || $GITLAB_FEATURES !~ /\bdependency_scanning\b/ || $DS_EXCLUDED_ANALYZERS =~ /gemnasium-python/'
|
|
when: never
|
|
# Run Dependency Scanning on master until https://gitlab.com/gitlab-org/gitlab/-/issues/361657 is resolved
|
|
- <<: *if-default-branch-refs
|
|
- <<: *if-default-refs
|
|
changes: *python-patterns
|
|
|
|
.reports:rules:yarn-audit-dependency_scanning:
|
|
rules:
|
|
- if: '$DEPENDENCY_SCANNING_DISABLED || $GITLAB_FEATURES !~ /\bdependency_scanning\b/'
|
|
when: never
|
|
# Run Dependency Scanning on master until https://gitlab.com/gitlab-org/gitlab/-/issues/361657 is resolved
|
|
- <<: *if-default-branch-refs
|
|
- <<: *if-default-refs
|
|
changes: *nodejs-patterns
|
|
|
|
.reports:rules:test-dast:
|
|
rules:
|
|
- if: '$DAST_DISABLED || $GITLAB_FEATURES !~ /\bdast\b/'
|
|
when: never
|
|
- <<: *if-merge-request
|
|
|
|
.reports:rules:package_hunter-yarn:
|
|
rules:
|
|
- if: "$PACKAGE_HUNTER_USER == null || $PACKAGE_HUNTER_USER == ''"
|
|
when: never
|
|
- <<: *if-schedule-maintenance
|
|
- <<: *if-merge-request
|
|
changes: ["yarn.lock"]
|
|
|
|
.reports:rules:package_hunter-bundler:
|
|
rules:
|
|
- if: "$PACKAGE_HUNTER_USER == null || $PACKAGE_HUNTER_USER == ''"
|
|
when: never
|
|
- <<: *if-schedule-maintenance
|
|
- <<: *if-merge-request
|
|
changes: ["Gemfile.lock"]
|
|
|
|
.reports:rules:license_scanning:
|
|
rules:
|
|
- if: '$LICENSE_MANAGEMENT_DISABLED || $GITLAB_FEATURES !~ /\blicense_scanning\b/'
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *dependency-patterns
|
|
|
|
################
|
|
# Review rules #
|
|
################
|
|
.review-change-pattern: &review-change-pattern
|
|
APP_CHANGE_TRIGGER: "true"
|
|
|
|
# The following rules needs to be the same as the one for .review:rules:review-cleanup
|
|
# except that:
|
|
# - most rules re automatic here (i.e. no `when: manual`) and not allowed to fail (i.e. no `allow_failure: true`) here
|
|
# - several rules have `variables: *review-change-pattern` here
|
|
.review:rules:start-review-app-pipeline:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-pipeline-expedite
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-review-app
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *ci-review-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *frontend-build-patterns
|
|
variables: *review-change-pattern
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *controllers-patterns
|
|
variables: *review-change-pattern
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *models-patterns
|
|
variables: *review-change-pattern
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *lib-gitlab-patterns
|
|
variables: *review-change-pattern
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *qa-patterns
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *code-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-schedule
|
|
allow_failure: true
|
|
variables:
|
|
KNAPSACK_GENERATE_REPORT: "true"
|
|
QA_SAVE_TEST_METRICS: "true"
|
|
QA_EXPORT_TEST_METRICS: "false" # on main runs, metrics are exported to separate bucket via rake task for better consistency
|
|
|
|
# The following rules needs to be the same as the one for .review:rules:start-review-app-pipeline
|
|
# except that:
|
|
# - all rules have `when: manual` and `allow_failure: true` here
|
|
.review:rules:review-stop-merge-requests:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-merge-request-labels-pipeline-expedite
|
|
when: never
|
|
- <<: *if-merge-request-labels-run-review-app
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *ci-review-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *frontend-build-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *controllers-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *models-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *lib-gitlab-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *qa-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *code-patterns
|
|
when: manual
|
|
allow_failure: true
|
|
|
|
.review:rules:review-cleanup:
|
|
rules:
|
|
- !reference [".review:rules:review-stop-merge-requests", rules]
|
|
- <<: *if-dot-com-ee-schedule-default-branch-maintenance
|
|
allow_failure: true
|
|
|
|
.review:rules:review-stop:
|
|
rules:
|
|
- !reference [".review:rules:review-stop-merge-requests", rules]
|
|
- <<: *if-dot-com-gitlab-org-schedule
|
|
when: manual
|
|
allow_failure: true
|
|
|
|
.review:rules:review-k8s-resources-count-checks:
|
|
rules:
|
|
- <<: *if-dot-com-ee-schedule-default-branch-maintenance
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes:
|
|
- "scripts/review_apps/k8s-resources-count-checks.sh"
|
|
allow_failure: true
|
|
|
|
.review:rules:review-gcp-quotas-checks:
|
|
rules:
|
|
- <<: *if-dot-com-ee-schedule-default-branch-maintenance
|
|
allow_failure: true
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes:
|
|
- "scripts/review_apps/gcp-quotas-checks.rb"
|
|
allow_failure: true
|
|
|
|
.review:rules:danger:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
|
|
.review:rules:danger-local:
|
|
rules:
|
|
- <<: *if-merge-request
|
|
changes: *danger-patterns
|
|
|
|
###############
|
|
# Setup rules #
|
|
###############
|
|
.setup:rules:cache-gems:
|
|
rules:
|
|
- <<: *if-not-canonical-namespace
|
|
when: never
|
|
- <<: *if-default-branch-or-tag
|
|
changes: *code-backstage-qa-patterns
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: [".gitlab/ci/setup.gitlab-ci.yml"]
|
|
when: manual
|
|
allow_failure: true
|
|
|
|
.setup:rules:dont-interrupt-me:
|
|
rules:
|
|
- <<: *if-default-branch-or-tag
|
|
allow_failure: true
|
|
- <<: *if-schedule-pipeline
|
|
allow_failure: true
|
|
- <<: *if-auto-deploy-branches
|
|
allow_failure: true
|
|
- when: manual
|
|
allow_failure: true
|
|
|
|
.setup:rules:gitlab_git_test:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.setup:rules:rails-production-environment:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-patterns
|
|
|
|
.setup:rules:no-ee-check:
|
|
rules:
|
|
- <<: *if-not-foss
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.setup:rules:no-jh-check:
|
|
rules:
|
|
- <<: *if-jh
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.setup:rules:verify-ruby-3.0:
|
|
rules:
|
|
- <<: *if-merge-request-labels-run-in-ruby2
|
|
|
|
.setup:rules:verify-tests-yml:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
|
|
.setup:rules:jh-contribution:
|
|
rules:
|
|
- <<: *if-jh
|
|
when: never
|
|
- <<: *if-merge-request-labels-jh-contribution
|
|
|
|
.setup:rules:generate-frontend-fixtures-mapping:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-dot-com-ee-schedule-default-branch-maintenance
|
|
- <<: *if-default-branch-refs
|
|
changes:
|
|
- ".gitlab/ci/setup.gitlab-ci.yml"
|
|
- ".gitlab/ci/test-metadata.gitlab-ci.yml"
|
|
- "scripts/rspec_helpers.sh"
|
|
|
|
#######################
|
|
# Test metadata rules #
|
|
#######################
|
|
.test-metadata:rules:retrieve-tests-metadata:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *code-backstage-patterns
|
|
- <<: *if-default-refs
|
|
changes: *workhorse-patterns
|
|
- <<: *if-merge-request-labels-run-all-rspec
|
|
|
|
.test-metadata:rules:update-tests-metadata:
|
|
rules:
|
|
- <<: *if-not-ee
|
|
when: never
|
|
- <<: *if-dot-com-ee-schedule-default-branch-maintenance
|
|
when: always
|
|
- <<: *if-default-branch-refs
|
|
changes:
|
|
- ".gitlab/ci/test-metadata.gitlab-ci.yml"
|
|
- "scripts/rspec_helpers.sh"
|
|
|
|
###################
|
|
# workhorse rules #
|
|
###################
|
|
.workhorse:rules:workhorse:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *workhorse-patterns
|
|
|
|
###################
|
|
# yaml-lint rules #
|
|
###################
|
|
.yaml-lint:rules:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *yaml-lint-patterns
|
|
|
|
.lint-pipeline-yaml:rules:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *lint-pipeline-yaml-patterns
|
|
|
|
.lint-metrics-yaml:rules:
|
|
rules:
|
|
- <<: *if-default-refs
|
|
changes: *lint-metrics-yaml-patterns
|
|
|
|
##################
|
|
# as-if-jh rules #
|
|
##################
|
|
.as-if-jh:rules:prepare-as-if-jh:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- !reference [".as-if-jh-default-exclusion-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-jh
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *feature-flag-development-config-patterns
|
|
|
|
# This rule should share the same logic with .as-if-jh:rules:prepare-as-if-jh
|
|
# Because the jobs using this need jobs using the preparation rules
|
|
.as-if-jh:rules:start-as-if-jh:
|
|
rules:
|
|
- !reference [".strict-ee-only-rules", rules]
|
|
- !reference [".as-if-jh-default-exclusion-rules", rules]
|
|
- <<: *if-merge-request-labels-as-if-jh
|
|
allow_failure: true # See https://gitlab.com/gitlab-org/gitlab/-/issues/351136
|
|
- <<: *if-dot-com-gitlab-org-merge-request
|
|
changes: *feature-flag-development-config-patterns
|
|
allow_failure: true # See https://gitlab.com/gitlab-org/gitlab/-/issues/351136
|