.gitlab-ci.yml 27.6 KB
Newer Older
1
image: "dev.gitlab.org:5005/gitlab/gitlab-build-images:ruby-2.3.7-golang-1.9-git-2.17-chrome-65.0-node-8.x-yarn-1.2-postgresql-9.6"
2

3 4 5 6 7
.dedicated-runner: &dedicated-runner
  retry: 1
  tags:
    - gitlab-org

8
.default-cache: &default-cache
9
  key: "ruby-2.3.7-debian-stretch-with-yarn"
10
  paths:
11 12
    - vendor/ruby
    - .yarn-cache/
13
    - vendor/gitaly-ruby
14 15 16 17 18 19 20 21 22 23

.push-cache: &push-cache
  cache:
    <<: *default-cache
    policy: push

.pull-cache: &pull-cache
  cache:
    <<: *default-cache
    policy: pull
24

25 26
variables:
  MYSQL_ALLOW_EMPTY_PASSWORD: "1"
Kamil Trzcinski's avatar
Kamil Trzcinski committed
27
  RAILS_ENV: "test"
28
  NODE_ENV: "test"
Kamil Trzcinski's avatar
Kamil Trzcinski committed
29
  SIMPLECOV: "true"
30
  GIT_DEPTH: "20"
31
  GIT_SUBMODULE_STRATEGY: "none"
32
  GET_SOURCES_ATTEMPTS: "3"
33
  KNAPSACK_RSPEC_SUITE_REPORT_PATH: knapsack/${CI_PROJECT_NAME}/rspec_report-master.json
34
  FLAKY_RSPEC_SUITE_REPORT_PATH: rspec_flaky/report-suite.json
35
  BUILD_ASSETS_IMAGE: "false"
36

Dmitriy Zaporozhets's avatar
Dmitriy Zaporozhets committed
37
before_script:
Kamil Trzcinski's avatar
Kamil Trzcinski committed
38
  - bundle --version
39
  - date
40
  - source scripts/utils.sh
41
  - date
42
  - source scripts/prepare_build.sh
43 44 45 46
  - date

after_script:
  - date
47

Kamil Trzcinski's avatar
Kamil Trzcinski committed
48
stages:
49 50
  - build
  - prepare
51
  - merge
52 53 54
  - test
  - post-test
  - pages
55
  - post-cleanup
56

57
# Predefined scopes
58
.tests-metadata-state: &tests-metadata-state
59
  <<: *dedicated-runner
60
  variables:
61
    TESTS_METADATA_S3_BUCKET: "gitlab-ce-cache"
62 63
  before_script:
    - source scripts/utils.sh
64 65 66
  artifacts:
    expire_in: 31d
    paths:
67
      - knapsack/
68
      - rspec_flaky/
69

70 71
.use-pg: &use-pg
  services:
72
    - postgres:9.6
73 74 75
    - redis:alpine

.use-mysql: &use-mysql
76
  services:
77
    - mysql:5.7
78
    - redis:alpine
79

80 81
.rails4: &rails4
  allow_failure: false
82
  except:
83
    variables:
84 85
      - $CI_COMMIT_REF_NAME =~ /(^docs[\/-].*|.*-docs$)/
      - $CI_COMMIT_REF_NAME =~ /(^qa[\/-].*|.*-qa$)/
86 87
      - $CI_COMMIT_REF_NAME =~ /norails4/
      - $RAILS5_DISABLED
88
  variables:
89 90
    BUNDLE_GEMFILE: "Gemfile.rails4"
    RAILS5: "false"
91

92 93
# Skip all jobs except the ones that begin with 'docs/'.
# Used for commits including ONLY documentation changes.
94
# https://docs.gitlab.com/ce/development/documentation/#testing
95 96
.except-docs: &except-docs
  except:
97
    - /(^docs[\/-].*|.*-docs$)/
98

99 100 101 102
.except-qa: &except-qa
  except:
    - /(^qa[\/-].*|.*-qa$)/

103 104 105 106 107
.except-docs-and-qa: &except-docs-and-qa
  except:
    - /(^docs[\/-].*|.*-docs$)/
    - /(^qa[\/-].*|.*-qa$)/

108 109 110
# Jobs that only need to pull cache
.dedicated-no-docs-pull-cache-job: &dedicated-no-docs-pull-cache-job
  <<: *dedicated-runner
111
  <<: *except-docs
112 113 114 115 116 117 118 119 120 121 122
  <<: *pull-cache
  dependencies:
    - setup-test-env
  stage: test

# Jobs that do not need a DB
.dedicated-no-docs-no-db-pull-cache-job: &dedicated-no-docs-no-db-pull-cache-job
  <<: *dedicated-no-docs-pull-cache-job
  variables:
    SETUP_DB: "false"

123 124 125 126
.dedicated-no-docs-and-no-qa-pull-cache-job: &dedicated-no-docs-and-no-qa-pull-cache-job
  <<: *dedicated-no-docs-pull-cache-job
  <<: *except-docs-and-qa

127
.single-script-job: &single-script-job
Stan Hu's avatar
Stan Hu committed
128
  image: ruby:2.5-alpine
129
  stage: test
130 131 132 133 134 135 136 137 138 139 140
  cache: {}
  dependencies: []
  variables: &single-script-job-variables
    GIT_STRATEGY: none
  before_script:
    # We need to download the script rather than clone the repo since the
    # package-and-qa job will not be able to run when the branch gets
    # deleted (when merging the MR).
    - export SCRIPT_NAME="${SCRIPT_NAME:-$CI_JOB_NAME}"
    - apk add --update openssl
    - wget $CI_PROJECT_URL/raw/$CI_COMMIT_SHA/scripts/$SCRIPT_NAME
Ian Baum's avatar
Ian Baum committed
141
    - chmod 755 $(basename $SCRIPT_NAME)
142

143 144 145 146 147
.rake-exec: &rake-exec
  <<: *dedicated-no-docs-no-db-pull-cache-job
  script:
    - bundle exec rake $CI_JOB_NAME

148
.rspec-metadata: &rspec-metadata
149
  <<: *dedicated-runner
150
  <<: *except-docs-and-qa
151
  <<: *pull-cache
152
  stage: test
153
  script:
154
    - JOB_NAME=( $CI_JOB_NAME )
155 156
    - TEST_TOOL=${JOB_NAME[0]}
    - export KNAPSACK_REPORT_PATH=knapsack/${CI_PROJECT_NAME}/${TEST_TOOL}_node_${CI_NODE_INDEX}_${CI_NODE_TOTAL}_report.json
157
    - export KNAPSACK_GENERATE_REPORT=true
158
    - export SUITE_FLAKY_RSPEC_REPORT_PATH=${FLAKY_RSPEC_SUITE_REPORT_PATH}
159 160
    - export FLAKY_RSPEC_REPORT_PATH=rspec_flaky/all_${TEST_TOOL}_${CI_NODE_INDEX}_${CI_NODE_TOTAL}_report.json
    - export NEW_FLAKY_RSPEC_REPORT_PATH=rspec_flaky/new_${TEST_TOOL}_${CI_NODE_INDEX}_${CI_NODE_TOTAL}_report.json
161
    - export FLAKY_RSPEC_GENERATE_REPORT=true
162
    - export CACHE_CLASSES=true
163
    - cp ${KNAPSACK_RSPEC_SUITE_REPORT_PATH} ${KNAPSACK_REPORT_PATH}
164
    - '[[ -f $FLAKY_RSPEC_REPORT_PATH ]] || echo "{}" > ${FLAKY_RSPEC_REPORT_PATH}'
165
    - '[[ -f $NEW_FLAKY_RSPEC_REPORT_PATH ]] || echo "{}" > ${NEW_FLAKY_RSPEC_REPORT_PATH}'
Jacob Vosmaer's avatar
Jacob Vosmaer committed
166
    - scripts/gitaly-test-spawn
167
    - knapsack rspec "--color --format documentation --format RspecJunitFormatter --out junit_rspec.xml"
168 169
  artifacts:
    expire_in: 31d
170
    when: always
171
    paths:
172 173
      - coverage/
      - knapsack/
174
      - rspec_flaky/
175
      - tmp/capybara/
176 177
    reports:
      junit: junit_rspec.xml
178

179 180
.rspec-metadata-pg: &rspec-metadata-pg
  <<: *rspec-metadata
181 182
  <<: *use-pg

183
.rspec-metadata-pg-rails4: &rspec-metadata-pg-rails4
184
  <<: *rspec-metadata-pg
185
  <<: *rails4
186

187 188
.rspec-metadata-mysql: &rspec-metadata-mysql
  <<: *rspec-metadata
189 190
  <<: *use-mysql

191
.rspec-metadata-mysql-rails4: &rspec-metadata-mysql-rails4
192
  <<: *rspec-metadata-mysql
193
  <<: *rails4
194

195 196 197 198 199 200 201
.only-canonical-masters: &only-canonical-masters
  only:
    - master@gitlab-org/gitlab-ce
    - master@gitlab-org/gitlab-ee
    - master@gitlab/gitlabhq
    - master@gitlab/gitlab-ee

202
.gitlab-setup: &gitlab-setup
203
  <<: *dedicated-no-docs-and-no-qa-pull-cache-job
204 205
  <<: *use-pg
  variables:
206
    SETUP_DB: "false"
207
  script:
208 209 210 211 212 213 214 215 216 217 218
    # Manually clone gitlab-test and only seed this project in
    # db/fixtures/development/04_project.rb thanks to SIZE=1 below
    - git clone https://gitlab.com/gitlab-org/gitlab-test.git
       /home/git/repositories/gitlab-org/gitlab-test.git
    - scripts/gitaly-test-spawn
    - force=yes SIZE=1 FIXTURE_PATH="db/fixtures/development" bundle exec rake gitlab:setup
  artifacts:
    when: on_failure
    expire_in: 1d
    paths:
      - log/development.log
219

220 221
# DB migration, rollback, and seed jobs
.db-migrate-reset: &db-migrate-reset
222
  <<: *dedicated-no-docs-and-no-qa-pull-cache-job
223 224 225 226
  script:
    - bundle exec rake db:migrate:reset

.migration-paths: &migration-paths
227
  <<: *dedicated-no-docs-and-no-qa-pull-cache-job
228
  variables:
229
    SETUP_DB: "false"
230 231 232
  script:
    - git fetch https://gitlab.com/gitlab-org/gitlab-ce.git v9.3.0
    - git checkout -f FETCH_HEAD
Stan Hu's avatar
Stan Hu committed
233 234
    - sed -i "s/gem 'oj', '~> 2.17.4'//" Gemfile
    - bundle update google-protobuf grpc
235 236 237 238 239
    - bundle install $BUNDLE_INSTALL_FLAGS
    - date
    - cp config/gitlab.yml.example config/gitlab.yml
    - bundle exec rake db:drop db:create db:schema:load db:seed_fu
    - date
240
    - git checkout -f $CI_COMMIT_SHA
241 242 243 244 245 246 247 248 249
    - bundle install $BUNDLE_INSTALL_FLAGS
    - date
    - . scripts/prepare_build.sh
    - date
    - bundle exec rake db:migrate

##
# Trigger a package build in omnibus-gitlab repository
#
250
package-and-qa:
251
  <<: *single-script-job
252
  variables:
253
    <<: *single-script-job-variables
254
    SCRIPT_NAME: trigger-build
255
  retry: 0
256
  script:
257
    - gem install gitlab --no-document
258
    - ./$SCRIPT_NAME omnibus
259
  when: manual
260 261 262 263
  only:
    - //@gitlab-org/gitlab-ce
    - //@gitlab-org/gitlab-ee

264 265 266 267 268 269 270
# Review docs base
.review-docs: &review-docs
  <<: *dedicated-runner
  <<: *single-script-job
  variables:
    <<: *single-script-job-variables
    SCRIPT_NAME: trigger-build-docs
271
  environment:
272
    name: review-docs/$CI_COMMIT_REF_SLUG
273
    # DOCS_REVIEW_APPS_DOMAIN and DOCS_GITLAB_REPO_SUFFIX are CI variables
274
    # Discussion: https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/14236/diffs#note_40140693
275
    url: http://$CI_ENVIRONMENT_SLUG.$DOCS_REVIEW_APPS_DOMAIN/$DOCS_GITLAB_REPO_SUFFIX
276
    on_stop: review-docs-cleanup
277 278 279 280 281 282

# Trigger a manual docs build in gitlab-docs only on non docs-only branches.
# Useful to preview the docs changes live.
review-docs-deploy-manual:
  <<: *review-docs
  stage: build
283
  script:
284
    - gem install gitlab --no-document
285
    - ./$SCRIPT_NAME deploy
286 287
  when: manual
  only:
288 289
    - branches@gitlab-org/gitlab-ce
    - branches@gitlab-org/gitlab-ee
290 291 292 293 294 295 296 297
  <<: *except-docs-and-qa

# Always trigger a docs build in gitlab-docs only on docs-only branches.
# Useful to preview the docs changes live.
review-docs-deploy:
  <<: *review-docs
  stage: post-test
  script:
298
    - gem install gitlab --no-document
299 300
    - ./$SCRIPT_NAME deploy
  only:
301 302
    - /(^docs[\/-].*|.*-docs$)/@gitlab-org/gitlab-ce
    - /(^docs[\/-].*|.*-docs$)/@gitlab-org/gitlab-ee
303
  <<: *except-qa
304 305 306 307 308 309

# Cleanup remote environment of gitlab-docs
review-docs-cleanup:
  <<: *review-docs
  stage: post-cleanup
  environment:
310
    name: review-docs/$CI_COMMIT_REF_SLUG
311 312
    action: stop
  script:
313
    - gem install gitlab --no-document
314
    - ./$SCRIPT_NAME cleanup
315 316 317 318
  when: manual
  only:
    - branches@gitlab-org/gitlab-ce
    - branches@gitlab-org/gitlab-ee
319

320 321 322 323
##
# Trigger a docker image build in CNG (Cloud Native GitLab) repository
#
cloud-native-image:
Stan Hu's avatar
Stan Hu committed
324
  image: ruby:2.5-alpine
325
  before_script: []
326
  dependencies: []
327
  stage: post-test
328
  allow_failure: true
329 330
  variables:
    GIT_DEPTH: "1"
331 332
  cache: {}
  script:
333 334
    - gem install gitlab --no-document
    - CNG_PROJECT_PATH="gitlab-org/build/CNG" BUILD_TRIGGER_TOKEN=$CI_JOB_TOKEN ./scripts/trigger-build cng
335 336 337 338
  only:
    - tags@gitlab-org/gitlab-ce
    - tags@gitlab-org/gitlab-ee

339 340 341
# Retrieve knapsack and rspec_flaky reports
retrieve-tests-metadata:
  <<: *tests-metadata-state
342
  <<: *except-docs-and-qa
343
  stage: prepare
344
  cache:
345
    key: tests_metadata
346
    policy: pull
347
  script:
348
    - mkdir -p knapsack/${CI_PROJECT_NAME}/
349
    - wget -O $KNAPSACK_RSPEC_SUITE_REPORT_PATH http://${TESTS_METADATA_S3_BUCKET}.s3.amazonaws.com/$KNAPSACK_RSPEC_SUITE_REPORT_PATH || rm $KNAPSACK_RSPEC_SUITE_REPORT_PATH
350
    - '[[ -f $KNAPSACK_RSPEC_SUITE_REPORT_PATH ]] || echo "{}" > ${KNAPSACK_RSPEC_SUITE_REPORT_PATH}'
351
    - mkdir -p rspec_flaky/
352 353
    - wget -O $FLAKY_RSPEC_SUITE_REPORT_PATH http://${TESTS_METADATA_S3_BUCKET}.s3.amazonaws.com/$FLAKY_RSPEC_SUITE_REPORT_PATH || rm $FLAKY_RSPEC_SUITE_REPORT_PATH
    - '[[ -f $FLAKY_RSPEC_SUITE_REPORT_PATH ]] || echo "{}" > ${FLAKY_RSPEC_SUITE_REPORT_PATH}'
354

355 356
update-tests-metadata:
  <<: *tests-metadata-state
357
  <<: *only-canonical-masters
358
  stage: post-test
359
  cache:
360
    key: tests_metadata
361 362
    paths:
      - knapsack/
363
      - rspec_flaky/
364
    policy: push
365
  script:
366
    - retry gem install fog-aws mime-types activesupport --no-document
367
    - scripts/merge-reports ${KNAPSACK_RSPEC_SUITE_REPORT_PATH} knapsack/${CI_PROJECT_NAME}/rspec-pg_node_*.json
368
    - scripts/merge-reports ${FLAKY_RSPEC_SUITE_REPORT_PATH} rspec_flaky/all_*_*.json
369
    - FLAKY_RSPEC_GENERATE_REPORT=1 scripts/prune-old-flaky-specs ${FLAKY_RSPEC_SUITE_REPORT_PATH}
blackst0ne's avatar
blackst0ne committed
370
    - '[[ -z ${TESTS_METADATA_S3_BUCKET} ]] || scripts/sync-reports put $TESTS_METADATA_S3_BUCKET $KNAPSACK_RSPEC_SUITE_REPORT_PATH'
371
    - '[[ -z ${TESTS_METADATA_S3_BUCKET} ]] || scripts/sync-reports put $TESTS_METADATA_S3_BUCKET $FLAKY_RSPEC_SUITE_REPORT_PATH'
372
    - rm -f knapsack/${CI_PROJECT_NAME}/*_node_*.json
373
    - rm -f rspec_flaky/all_*.json rspec_flaky/new_*.json
374 375 376

flaky-examples-check:
  <<: *dedicated-runner
Stan Hu's avatar
Stan Hu committed
377
  image: ruby:2.5-alpine
378 379 380 381 382
  services: []
  before_script: []
  variables:
    SETUP_DB: "false"
    USE_BUNDLE_INSTALL: "false"
383
    NEW_FLAKY_SPECS_REPORT: rspec_flaky/report-new.json
384
  stage: post-test
385
  allow_failure: true
386
  retry: 0
387 388 389 390
  only:
    - branches
  except:
    - master
391
    - /(^docs[\/-].*|.*-docs$)/
392
    - /(^qa[\/-].*|.*-qa$)/
393 394 395 396 397 398
  artifacts:
    expire_in: 30d
    paths:
      - rspec_flaky/
  script:
    - '[[ -f $NEW_FLAKY_SPECS_REPORT ]] || echo "{}" > ${NEW_FLAKY_SPECS_REPORT}'
399
    - scripts/merge-reports ${NEW_FLAKY_SPECS_REPORT} rspec_flaky/new_*_*.json
400
    - scripts/detect-new-flaky-examples $NEW_FLAKY_SPECS_REPORT
401

402
compile-assets:
403
  <<: *dedicated-runner
404
  <<: *except-docs
405
  <<: *use-pg
406
  stage: prepare
407 408
  cache:
    <<: *default-cache
409
  script:
410
    - node --version
411
    - date
412
    - yarn install --frozen-lockfile --cache-folder .yarn-cache
413
    - date
414
    - free -m
Mike Greiling's avatar
Mike Greiling committed
415
    - bundle exec rake gitlab:assets:compile
416 417 418
  variables:
    # we override the max_old_space_size to prevent OOM errors
    NODE_OPTIONS: --max_old_space_size=3584
419 420 421
  artifacts:
    expire_in: 7d
    paths:
422
      - node_modules
423
      - public/assets
424 425 426 427 428 429 430 431 432 433 434

setup-test-env:
  <<: *dedicated-runner
  <<: *except-docs
  <<: *use-pg
  stage: prepare
  cache:
    <<: *default-cache
  script:
    - bundle exec ruby -Ispec -e 'require "spec_helper" ; TestEnv.init'
    - scripts/gitaly-test-build # Do not use 'bundle exec' here
435
    - BUNDLE_GEMFILE=Gemfile.rails4 bundle install $BUNDLE_INSTALL_FLAGS
436 437 438
  artifacts:
    expire_in: 7d
    paths:
439
      - tmp/tests
440
      - config/secrets.yml
441
      - vendor/gitaly-ruby
442

443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486
# GitLab Review apps
.review-base: &review-base
  <<: *dedicated-no-docs-no-db-pull-cache-job
  image: registry.gitlab.com/gitlab-org/gitlab-build-images:gitlab-charts-build-base
  stage: test
  cache: {}
  dependencies: []
  environment: &review-environment
    name: review/${CI_COMMIT_REF_NAME}
    url: https://gitlab-${CI_ENVIRONMENT_SLUG}.${REVIEW_APPS_DOMAIN}
  only:
    refs:
      - branches@gitlab-org/gitlab-ce
      - branches@gitlab-org/gitlab-ee
    kubernetes: active
  except:
    refs:
      - master
      - /(^docs[\/-].*|.*-docs$)/
  before_script: []

.review-docker: &review-docker
  <<: *review-base
  image: registry.gitlab.com/gitlab-org/gitlab-build-images:gitlab-qa-alpine
  services:
    - docker:stable-dind
  tags:
    - gitlab-org
    - docker
  variables: &review-docker-variables
    GIT_DEPTH: "1"
    DOCKER_DRIVER: overlay2
    DOCKER_HOST: tcp://docker:2375
    LATEST_QA_IMAGE: "gitlab/${CI_PROJECT_NAME}-qa:nightly"
    QA_IMAGE: "${CI_REGISTRY}/${CI_PROJECT_PATH}/gitlab/${CI_PROJECT_NAME}-qa:${CI_COMMIT_REF_SLUG}"

build-qa-image:
  <<: *review-docker
  stage: prepare
  script:
    - time docker build --cache-from ${LATEST_QA_IMAGE} --tag ${QA_IMAGE} ./qa/
    - echo "${CI_JOB_TOKEN}" | docker login --username gitlab-ci-token --password-stdin ${CI_REGISTRY}
    - time docker push ${QA_IMAGE}

487
danger-review:
488
  <<: *pull-cache
489
  image: registry.gitlab.com/gitlab-org/gitlab-build-images:danger
490
  stage: test
491 492
  dependencies: []
  before_script: []
493
  only:
494 495
    variables:
      - $DANGER_GITLAB_API_TOKEN
496 497 498 499 500
  except:
    refs:
      - master
    variables:
      - $CI_COMMIT_REF_NAME =~ /^ce-to-ee-.*/
501
      - $CI_COMMIT_REF_NAME =~ /.*-stable(-ee)?-prepare-.*/
502 503
  script:
    - git version
504
    - node --version
505
    - yarn install --frozen-lockfile --cache-folder .yarn-cache
506 507
    - danger --fail-on-errors=true

508 509
rspec-pg:
  <<: *rspec-metadata-pg
510
  parallel: 50
511 512 513

rspec-mysql:
  <<: *rspec-metadata-mysql
514
  parallel: 50
515 516 517

rspec-pg-rails4:
  <<: *rspec-metadata-pg-rails4
518
  parallel: 50
519 520 521

rspec-mysql-rails4:
  <<: *rspec-metadata-mysql-rails4
522
  parallel: 50
523

524
static-analysis:
525 526 527 528
  <<: *dedicated-no-docs-no-db-pull-cache-job
  dependencies:
    - compile-assets
    - setup-test-env
529
  script:
530
    - scripts/static-analysis
531
  cache:
532
    key: "ruby-2.3.7-debian-stretch-with-yarn-and-rubocop"
533 534 535 536
    paths:
      - vendor/ruby
      - .yarn-cache/
      - tmp/rubocop_cache
537

538 539 540 541
# Documentation checks:
# - Check validity of relative links
# - Make sure cURL examples in API docs use the full switches
docs lint:
542
  <<: *dedicated-runner
543
  <<: *except-qa
544
  image: "registry.gitlab.com/gitlab-org/gitlab-build-images:gitlab-docs-lint"
545 546 547 548 549
  stage: test
  cache: {}
  dependencies: []
  before_script: []
  script:
550
    - scripts/lint-doc.sh
551
    - scripts/lint-changelog-yaml
552 553
    - mv doc/ /tmp/gitlab-docs/content/
    - cd /tmp/gitlab-docs
554 555 556
    # Build HTML from Markdown
    - bundle exec nanoc
    # Check the internal links
557 558
    # Disabled until https://gitlab.com/gitlab-com/gitlab-docs/issues/305 is resolved
    # - bundle exec nanoc check internal_links
559

560 561
downtime_check:
  <<: *rake-exec
562 563 564 565
  except:
    - master
    - tags
    - /^[\d-]+-stable(-ee)?$/
566
    - /(^docs[\/-].*|.*-docs$)/
567
    - /(^qa[\/-].*|.*-qa$)/
568

569
rails4_gemfile_lock_check:
570 571 572
  <<: *dedicated-no-docs-no-db-pull-cache-job
  <<: *except-docs-and-qa
  script:
573
    - scripts/rails4-gemfile-lock-check
574

575 576
ee_compat_check:
  <<: *rake-exec
577
  dependencies: []
578 579 580
  except:
    - master
    - tags
581
    - /[\d-]+-stable(-ee)?/
582
    - /^security-/
583 584
    - branches@gitlab-org/gitlab-ee
    - branches@gitlab/gitlab-ee
585
  retry: 0
586
  artifacts:
587
    name: "${CI_JOB_NAME}_${CI_COMIT_REF_NAME}_${CI_COMMIT_SHA}"
588
    when: always
589 590 591 592
    expire_in: 10d
    paths:
      - ee_compat_check/patches/*.patch

593
db:migrate:reset-pg:
594 595 596
  <<: *db-migrate-reset
  <<: *use-pg

597
db:migrate:reset-mysql:
598 599 600
  <<: *db-migrate-reset
  <<: *use-mysql

601 602 603 604 605 606
db:check-schema-pg:
  <<: *db-migrate-reset
  <<: *use-pg
  script:
    - source scripts/schema_changed.sh

607 608 609 610 611 612 613 614
migration:path-pg:
  <<: *migration-paths
  <<: *use-pg

migration:path-mysql:
  <<: *migration-paths
  <<: *use-mysql

615
.db-rollback: &db-rollback
616
  <<: *dedicated-no-docs-and-no-qa-pull-cache-job
617
  script:
618
    - bundle exec rake db:migrate VERSION=20170523121229
619
    - bundle exec rake db:migrate
620

621
db:rollback-pg:
622 623 624
  <<: *db-rollback
  <<: *use-pg

625
db:rollback-mysql:
626 627 628
  <<: *db-rollback
  <<: *use-mysql

629 630
gitlab:setup-pg:
  <<: *gitlab-setup
631 632
  <<: *use-pg

633 634
gitlab:setup-mysql:
  <<: *gitlab-setup
635 636
  <<: *use-mysql

637
# Frontend-related jobs
638
gitlab:assets:compile:
639
  <<: *dedicated-no-docs-and-no-qa-pull-cache-job
Stan Hu's avatar
Stan Hu committed
640
  image: dev.gitlab.org:5005/gitlab/gitlab-build-images:ruby-2.5.3-git-2.18-chrome-69.0-node-8.x-yarn-1.2-graphicsmagick-1.3.29-docker-18.06.1
641
  dependencies: []
642 643
  services:
    - docker:stable-dind
644 645 646 647 648
  variables:
    NODE_ENV: "production"
    RAILS_ENV: "production"
    SETUP_DB: "false"
    SKIP_STORAGE_VALIDATION: "true"
649
    WEBPACK_REPORT: "true"
650 651
    # we override the max_old_space_size to prevent OOM errors
    NODE_OPTIONS: --max_old_space_size=3584
652 653
    DOCKER_DRIVER: overlay2
    DOCKER_HOST: tcp://docker:2375
654
  script:
655
    - date
656
    - yarn install --frozen-lockfile --production --cache-folder .yarn-cache
657
    - date
658
    - free -m
659
    - bundle exec rake gitlab:assets:compile
660
    - scripts/build_assets_image
661 662 663 664
  artifacts:
    name: webpack-report
    expire_in: 31d
    paths:
665
      - webpack-report/
666
      - public/assets/
667
  only:
668 669
    - //@gitlab-org/gitlab-ce
    - //@gitlab-org/gitlab-ee
670
    - //@gitlab/gitlabhq
671
    - //@gitlab/gitlab-ee
672
  tags:
673 674
    - gitlab-org-delivery
    - high-cpu
675

676
karma:
677
  <<: *dedicated-no-docs-pull-cache-job
678
  <<: *use-pg
679 680 681
  dependencies:
    - compile-assets
    - setup-test-env
682 683 684
  variables:
    # we override the max_old_space_size to prevent OOM errors
    NODE_OPTIONS: --max_old_space_size=3584
685
  script:
686
    - export BABEL_ENV=coverage CHROME_LOG_FILE=chrome_debug.log
687
    - date
Jacob Vosmaer's avatar
Jacob Vosmaer committed
688
    - scripts/gitaly-test-spawn
689
    - date
690
    - bundle exec rake karma
691
  coverage: '/^Statements *: (\d+\.\d+%)/'
692 693 694
  artifacts:
    name: coverage-javascript
    expire_in: 31d
695
    when: always
696
    paths:
697 698
      - chrome_debug.log
      - coverage-javascript/
699 700
    reports:
      junit: junit_karma.xml
701

702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727
jest:
  <<: *dedicated-no-docs-and-no-qa-pull-cache-job
  <<: *use-pg
  dependencies:
  - compile-assets
  - setup-test-env
  script:
    - scripts/gitaly-test-spawn
    - date
    - bundle exec rake karma:fixtures
    - date
    - yarn jest --ci --coverage
  artifacts:
    name: coverage-frontend
    expire_in: 31d
    when: always
    paths:
    - coverage-frontend/
    - junit_jest.xml
    reports:
      junit: junit_jest.xml
  cache:
    key: jest
    paths:
      - tmp/jest/jest/

Shinya Maeda's avatar
Shinya Maeda committed
728
code_quality:
729
  <<: *dedicated-no-docs-no-db-pull-cache-job
730 731
  image: docker:stable
  allow_failure: true
732 733 734
  # gitlab-org runners set `privileged: false` but we need to have it set to true
  # since we're using Docker in Docker
  tags: []
735
  before_script: []
736
  services:
737
    - docker:stable-dind
738 739 740 741 742
  variables:
    SETUP_DB: "false"
    DOCKER_DRIVER: overlay2
  cache: {}
  dependencies: []
743
  script:
744 745
    # Extract "MAJOR.MINOR" from CI_SERVER_VERSION and generate "MAJOR-MINOR-stable" for Security Products
    - export SP_VERSION=$(echo "$CI_SERVER_VERSION" | sed 's/^\([0-9]*\)\.\([0-9]*\).*/\1-\2-stable/')
Shinya Maeda's avatar
Shinya Maeda committed
746 747 748 749 750
    - docker run
        --env SOURCE_CODE="$PWD"
        --volume "$PWD":/code
        --volume /var/run/docker.sock:/var/run/docker.sock
        "registry.gitlab.com/gitlab-org/security-products/codequality:$SP_VERSION" /code
751
  artifacts:
752 753
    reports:
      codequality: gl-code-quality-report.json
754
    expire_in: 1 week
755

756
sast:
757 758
  <<: *dedicated-no-docs-no-db-pull-cache-job
  image: docker:stable
759
  variables:
760 761 762 763
    SAST_CONFIDENCE_LEVEL: 2
    DOCKER_DRIVER: overlay2
  allow_failure: true
  tags: []
764
  before_script: []
765 766 767 768
  cache: {}
  dependencies: []
  services:
    - docker:stable-dind
769
  script:
770 771 772 773 774 775
    - export SP_VERSION=$(echo "$CI_SERVER_VERSION" | sed 's/^\([0-9]*\)\.\([0-9]*\).*/\1-\2-stable/')
    - docker run
        --env SAST_CONFIDENCE_LEVEL="${SAST_CONFIDENCE_LEVEL:-3}"
        --volume "$PWD:/code"
        --volume /var/run/docker.sock:/var/run/docker.sock
        "registry.gitlab.com/gitlab-org/security-products/sast:$SP_VERSION" /app/bin/run /code
776
  artifacts:
777 778
    reports:
      sast: gl-sast-report.json
779

780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799
dependency_scanning:
  <<: *dedicated-no-docs-no-db-pull-cache-job
  image: docker:stable
  variables:
    DOCKER_DRIVER: overlay2
  allow_failure: true
  tags: []
  before_script: []
  cache: {}
  dependencies: []
  services:
    - docker:stable-dind
  script:
    - export SP_VERSION=$(echo "$CI_SERVER_VERSION" | sed 's/^\([0-9]*\)\.\([0-9]*\).*/\1-\2-stable/')
    - docker run
        --env DEP_SCAN_DISABLE_REMOTE_CHECKS="${DEP_SCAN_DISABLE_REMOTE_CHECKS:-false}"
        --volume "$PWD:/code"
        --volume /var/run/docker.sock:/var/run/docker.sock
        "registry.gitlab.com/gitlab-org/security-products/dependency-scanning:$SP_VERSION" /code
  artifacts:
800 801
    reports:
      dependency_scanning: gl-dependency-scanning-report.json
802

803
qa:internal:
804
  <<: *dedicated-no-docs-no-db-pull-cache-job
805 806 807 808 809 810
  services: []
  script:
    - cd qa/
    - bundle install
    - bundle exec rspec

811
qa:selectors:
812
  <<: *dedicated-no-docs-no-db-pull-cache-job
813 814 815 816
  services: []
  script:
    - cd qa/
    - bundle install
817
    - bundle exec bin/qa Test::Sanity::Selectors
818

819 820 821 822 823 824 825 826 827 828 829 830 831 832 833
.qa-frontend-node: &qa-frontend-node
  stage: test
  variables:
    NODE_OPTIONS: --max_old_space_size=3584
  cache:
    key: "$CI_JOB_NAME"
    paths:
      - .yarn-cache/
  dependencies: []
  before_script: []
  script:
    - date
    - yarn install --frozen-lockfile --cache-folder .yarn-cache
    - date
    - yarn run webpack-prod
834
  <<: *except-docs
835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852

qa-frontend-node:6:
  <<: *qa-frontend-node
  image: node:6-alpine

qa-frontend-node:8:
  <<: *qa-frontend-node
  image: node:8-alpine

qa-frontend-node:10:
  <<: *qa-frontend-node
  image: node:10-alpine

qa-frontend-node:latest:
  <<: *qa-frontend-node
  image: node:alpine
  allow_failure: true

853
coverage:
854 855 856 857 858 859 860
  # Don't include dedicated-no-docs-no-db-pull-cache-job here since we need to
  # download artifacts from all the rspec jobs instead of from setup-test-env only
  <<: *dedicated-runner
  <<: *except-docs-and-qa
  <<: *pull-cache
  variables:
    SETUP_DB: "false"
861
  stage: post-test
862 863
  script:
    - bundle exec scripts/merge-simplecov
864
  coverage: '/LOC \((\d+\.\d+%)\) covered.$/'
865 866 867 868 869 870 871
  artifacts:
    name: coverage
    expire_in: 31d
    paths:
    - coverage/index.html
    - coverage/assets/

872
lint:javascript:report:
873
  <<: *dedicated-no-docs-and-no-qa-pull-cache-job
874
  stage: post-test
875
  dependencies: []
876
  before_script: []
877
  script:
878
    - date
879
    - yarn run eslint-report || true # ignore exit code
880 881 882 883
  artifacts:
    name: eslint-report
    expire_in: 31d
    paths:
884
      - eslint-report.html
885 886

pages:
887
  <<: *dedicated-no-docs-no-db-pull-cache-job
888 889 890 891
  before_script: []
  stage: pages
  dependencies:
    - coverage
892 893
    - karma
    - gitlab:assets:compile
894
    - lint:javascript:report
895 896 897
  script:
    - mv public/ .public/
    - mkdir public/
898
    - mv coverage/ public/coverage-ruby/ || true
899
    - mv coverage-javascript/ public/coverage-javascript/ || true
900
    - mv eslint-report.html public/ || true
901
    - mv webpack-report/ public/webpack-report/ || true
902 903
    - cp .public/assets/application-*.css public/application.css || true
    - cp .public/assets/application-*.css.gz public/application.css.gz || true
904 905 906 907
  artifacts:
    paths:
      - public
  only:
908
    - master@gitlab-org/gitlab-ce
909
    - master@gitlab-org/gitlab-ee
910 911 912 913

# Insurance in case a gem needed by one of our releases gets yanked from
# rubygems.org in the future.
cache gems:
914
  <<: *dedicated-no-docs-no-db-pull-cache-job
915 916 917 918 919
  script:
    - bundle package --all --all-platforms
  artifacts:
    paths:
      - vendor/cache
920 921
  only:
    - master@gitlab-org/gitlab-ce
922
    - master@gitlab-org/gitlab-ee
923
    - tags
924 925

gitlab_git_test:
926
  <<: *dedicated-runner
927
  <<: *except-docs-and-qa
928 929
  variables:
    SETUP_DB: "false"
930
  before_script: []
931
  dependencies: []
932
  cache: {}
933 934
  script:
    - spec/support/prepare-gitlab-git-test-for-commit --check-for-changes
935 936 937 938 939 940 941

no_ee_check:
  <<: *dedicated-runner
  <<: *except-docs-and-qa
  variables:
    SETUP_DB: "false"
  before_script: []
942
  dependencies: []
943 944 945 946 947
  cache: {}
  script:
    - scripts/no-ee-check
  only:
    - //@gitlab-org/gitlab-ce
948

Ian Baum's avatar
Ian Baum committed
949
# GitLab Review apps
950 951
review-deploy:
  <<: *review-base
952 953
  retry: 2
  allow_failure: true
954 955
  variables:
    GIT_DEPTH: "1"
956 957
    HOST_SUFFIX: "${CI_ENVIRONMENT_SLUG}"
    DOMAIN: "-${CI_ENVIRONMENT_SLUG}.${REVIEW_APPS_DOMAIN}"
958
    GITLAB_HELM_CHART_REF: "master"
959 960 961 962 963 964 965
    API_TOKEN: "${GITLAB_BOT_MULTI_PROJECT_PIPELINE_POLLING_TOKEN}"
  environment:
    <<: *review-environment
    on_stop: review-stop
  before_script:
    - apk update && apk add jq
    - gem install gitlab --no-document
966 967 968 969 970
  script:
    - export GITLAB_SHELL_VERSION=$(<GITLAB_SHELL_VERSION)
    - export GITALY_VERSION=$(<GITALY_SERVER_VERSION)
    - export GITLAB_WORKHORSE_VERSION=$(<GITLAB_WORKHORSE_VERSION)
    - source ./scripts/review_apps/review-apps.sh
971
    - wait_for_job_to_be_done "gitlab:assets:compile"
972 973 974 975 976
    - BUILD_TRIGGER_TOKEN=$REVIEW_APPS_BUILD_TRIGGER_TOKEN ./scripts/trigger-build cng
    - check_kube_domain
    - download_gitlab_chart
    - ensure_namespace
    - install_tiller
Ian Baum's avatar
Ian Baum committed
977
    - install_external_dns
978 979 980 981 982
    - time deploy
    - add_license

.review-qa-base: &review-qa-base
  <<: *review-docker
983 984
  retry: 2
  allow_failure: true
985 986 987 988 989 990 991 992 993 994 995
  variables:
    <<: *review-docker-variables
    API_TOKEN: "${GITLAB_BOT_MULTI_PROJECT_PIPELINE_POLLING_TOKEN}"
    QA_ARTIFACTS_DIR: "${CI_PROJECT_DIR}/qa"
    QA_CAN_TEST_GIT_PROTOCOL_V2: "false"
    GITLAB_USERNAME: "root"
    GITLAB_PASSWORD: "${REVIEW_APPS_ROOT_PASSWORD}"
    GITLAB_ADMIN_USERNAME: "root"
    GITLAB_ADMIN_PASSWORD: "${REVIEW_APPS_ROOT_PASSWORD}"
    GITHUB_ACCESS_TOKEN: "${REVIEW_APPS_QA_GITHUB_ACCESS_TOKEN}"
    EE_LICENSE: "${REVIEW_APPS_EE_LICENSE}"
996
    QA_DEBUG: "true"
997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019
  artifacts:
    paths:
      - ./qa/gitlab-qa-run-*
    expire_in: 7 days
    when: always
  before_script:
    - echo "${QA_IMAGE}"
    - echo "${CI_ENVIRONMENT_URL}"
    - apk update && apk add curl jq
    - source ./scripts/review_apps/review-apps.sh
    - gem install gitlab-qa --no-document ${GITLAB_QA_VERSION:+ --version ${GITLAB_QA_VERSION}}
    - wait_for_job_to_be_done "review-deploy"

review-qa-smoke:
  <<: *review-qa-base
  script:
    - gitlab-qa Test::Instance::Smoke "${QA_IMAGE}" "${CI_ENVIRONMENT_URL}"

review-qa-all:
  <<: *review-qa-base
  script:
    - gitlab-qa Test::Instance::Any "${QA_IMAGE}" "${CI_ENVIRONMENT_URL}"
  when: manual
1020

1021 1022
review-stop:
  <<: *review-base
1023 1024 1025
  <<: *single-script-job
  image: registry.gitlab.com/gitlab-org/gitlab-build-images:gitlab-charts-build-base
  allow_failure: true
Ian Baum's avatar
Ian Baum committed
1026
  variables:
1027
    <<: *single-script-job-variables
Ian Baum's avatar
Ian Baum committed
1028
    SCRIPT_NAME: "review_apps/review-apps.sh"
1029 1030 1031 1032
  when: manual
  environment:
    <<: *review-environment
    action: stop
1033
  script:
Ian Baum's avatar
Ian Baum committed
1034
    - source $(basename "${SCRIPT_NAME}")
1035 1036 1037
    - delete
    - cleanup

1038 1039
schedule:review-cleanup:
  <<: *review-base
1040
  stage: build
1041 1042 1043
  allow_failure: true
  variables:
    GIT_DEPTH: "1"
1044 1045
  environment:
    name: review/auto-cleanup
1046 1047
  only:
    refs:
Ian Baum's avatar
Ian Baum committed
1048
      - schedules@gitlab-org/gitlab-ce
1049
      - schedules@gitlab-org/gitlab-ee
1050
    kubernetes: active
1051
  except:
1052
    - tags
1053
    - /(^docs[\/-].*|.*-docs$)/
1054 1055 1056 1057
  before_script:
    - gem install gitlab --no-document
  script:
    - ruby -rrubygems scripts/review_apps/automated_cleanup.rb