require 'spec_helper' describe Gitlab::Ci::Build::Policy::Variables do set(:project) { create(:project) } let(:pipeline) do build(:ci_empty_pipeline, project: project, ref: 'master', source: :push) end let(:ci_build) do build(:ci_build, pipeline: pipeline, project: project, ref: 'master') end let(:seed) { double('build seed', to_resource: ci_build) } before do pipeline.variables.build(key: 'CI_PROJECT_NAME', value: '') end describe '#satisfied_by?' do it 'is satisfied by at least one matching statement' do policy = described_class.new(['$CI_PROJECT_ID', '$UNDEFINED']) expect(policy).to be_satisfied_by(pipeline, seed) end it 'is not satisfied by an overriden empty variable' do policy = described_class.new(['$CI_PROJECT_NAME']) expect(policy).not_to be_satisfied_by(pipeline, seed) end it 'is satisfied by a truthy pipeline expression' do policy = described_class.new([%($CI_PIPELINE_SOURCE == "push")]) expect(policy).to be_satisfied_by(pipeline, seed) end it 'is not satisfied by a falsy pipeline expression' do policy = described_class.new([%($CI_PIPELINE_SOURCE == "invalid source")]) expect(policy).not_to be_satisfied_by(pipeline, seed) end it 'is satisfied by a truthy expression using undefined variable' do policy = described_class.new(['$UNDEFINED == null']) expect(policy).to be_satisfied_by(pipeline, seed) end it 'is not satisfied by a falsy expression using undefined variable' do policy = described_class.new(['$UNDEFINED']) expect(policy).not_to be_satisfied_by(pipeline, seed) end it 'allows to evaluate regular secret variables' do create(:ci_variable, project: project, key: 'SECRET', value: 'my secret') policy = described_class.new(["$SECRET == 'my secret'"]) expect(policy).to be_satisfied_by(pipeline, seed) end it 'does not persist neither pipeline nor build' do described_class.new('$VAR').satisfied_by?(pipeline, seed) expect(pipeline).not_to be_persisted expect(seed.to_resource).not_to be_persisted end end end