Merge branch 'mcelicalderong-follow-up-regression-spec' into 'master'

Add regression spec for security bot create service

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/132695



Merged-by: Mehmet Emin INAC <minac@gitlab.com>
Approved-by: mo khan <mo@mokhan.ca>
Approved-by: Mehmet Emin INAC <minac@gitlab.com>
Co-authored-by: Alan (Maciej) Paruszewski <mparuszewski@gitlab.com>
Co-authored-by: Mario Celi <mcelicalderon@gitlab.com>

ee/app/models/ee/member.rb

@@ -129,7 +129,7 @@ def group_domain_limitations
       return unless group
 
       if user
-        return if user.project_bot?
+        return if user.project_bot? || user.security_policy_bot?
 
         validate_users_email
         validate_email_verified

ee/spec/services/security/orchestration/create_bot_service_spec.rb

@@ -3,7 +3,8 @@
 require 'spec_helper'
 
 RSpec.describe Security::Orchestration::CreateBotService, feature_category: :security_policy_management do
-  let_it_be(:project) { create(:project) }
+  let_it_be(:group) { create(:group) }
+  let_it_be(:project) { create(:project, group: group) }
   let_it_be(:user) { create(:user) }
   let!(:security_orchestration_policy_configuration) do
     create(:security_orchestration_policy_configuration, project: project)
@@ -30,6 +31,18 @@
         expect { execute_service }.to change { User.count }.by(1)
         expect(project.security_policy_bot).to be_present
       end
+
+      context 'when group_allowed_email_domains feature is available' do
+        before do
+          stub_licensed_features(group_allowed_email_domains: true)
+          create(:allowed_email_domain, group: group, domain: 'noreply.gitlab.com')
+        end
+
+        it 'creates and assigns a bot user', :aggregate_failures do
+          expect { execute_service }.to change { User.count }.by(1)
+          expect(project.security_policy_bot).to be_present
+        end
+      end
     end
   end