Merge branch '325646-group-approval-rules-migration' into 'master'

Group approval rules migration

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/132651



Merged-by: Michał Zając <mzajac@gitlab.com>
Approved-by: Michał Zając <mzajac@gitlab.com>
Reviewed-by: Alexandru Croitor <acroitor@gitlab.com>
Co-authored-by: ghinfey <“ghinfey@gitlab.com”>

db/docs/approval_group_rules.yml

+---
+table_name: approval_group_rules
+classes:
+  - ApprovalRules::ApprovalGroupRule
+feature_categories:
+  - source_code_management
+description: Keeps approval group rules
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/132651
+milestone: '16.5'
+gitlab_schema: gitlab_main

db/docs/approval_group_rules_groups.yml

+---
+table_name: approval_group_rules_groups
+classes: []
+feature_categories:
+  - source_code_management
+description: Keeps connection between group and a group approval rule
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/132651
+milestone: '16.5'
+gitlab_schema: gitlab_main

db/docs/approval_group_rules_protected_branches.yml

+---
+table_name: approval_group_rules_protected_branches
+classes: []
+feature_categories:
+  - source_code_management
+description: Keeps relation between approval group rules and protected branches.
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/132651
+milestone: '16.5'
+gitlab_schema: gitlab_main

db/docs/approval_group_rules_users.yml

+---
+table_name: approval_group_rules_users
+classes: []
+feature_categories:
+  - source_code_management
+description: Keeps connection between user and a group approval rule
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/132651
+milestone: '16.5'
+gitlab_schema: gitlab_main

db/migrate/20230926092914_add_approval_group_rules.rb

+# frozen_string_literal: true
+
+class AddApprovalGroupRules < Gitlab::Database::Migration[2.1]
+  INDEX_GROUP_ID_TYPE_NAME = 'idx_on_approval_group_rules_group_id_type_name'
+  INDEX_ANY_APPROVER_TYPE = 'idx_on_approval_group_rules_any_approver_type'
+  INDEX_SECURITY_ORCHESTRATION_POLICY_CONFURATION = 'idx_on_approval_group_rules_security_orch_policy'
+  disable_ddl_transaction!
+
+  def up
+    create_table :approval_group_rules do |t|
+      t.references :group, references: :namespaces, null: false,
+        foreign_key: { to_table: :namespaces, on_delete: :cascade }, index: false
+      t.timestamps_with_timezone
+      t.integer :approvals_required, limit: 2, null: false, default: 0
+      t.integer :report_type, limit: 2, null: true, default: nil
+      t.integer :rule_type, limit: 2, null: false, default: 1
+      t.integer :security_orchestration_policy_configuration_id, limit: 5
+      t.integer :scan_result_policy_id, limit: 5, index: true
+      t.text :name, null: false, limit: 255
+
+      t.index [:group_id, :rule_type, :name], unique: true, name: INDEX_GROUP_ID_TYPE_NAME
+      t.index [:group_id, :rule_type], where: 'rule_type = 4', unique: true, name: INDEX_ANY_APPROVER_TYPE
+      t.index :security_orchestration_policy_configuration_id, name: INDEX_SECURITY_ORCHESTRATION_POLICY_CONFURATION
+    end
+
+    add_text_limit :approval_group_rules, :name, 255
+  end
+
+  def down
+    with_lock_retries do
+      drop_table :approval_group_rules
+    end
+  end
+end

db/migrate/20230926092944_add_approval_group_rules_groups.rb

+# frozen_string_literal: true
+
+class AddApprovalGroupRulesGroups < Gitlab::Database::Migration[2.1]
+  INDEX_RULE_GROUP = 'idx_on_approval_group_rules_groups_rule_group'
+
+  def up
+    create_table :approval_group_rules_groups do |t|
+      t.bigint :approval_group_rule_id, null: false
+      t.bigint :group_id, null: false, index: true
+
+      t.index [:approval_group_rule_id, :group_id], unique: true, name: INDEX_RULE_GROUP
+    end
+  end
+
+  def down
+    drop_table :approval_group_rules_groups
+  end
+end

db/migrate/20230926093004_add_approval_group_rules_users.rb

+# frozen_string_literal: true
+
+class AddApprovalGroupRulesUsers < Gitlab::Database::Migration[2.1]
+  INDEX_RULE_USER = 'idx_on_approval_group_rules_users_rule_user'
+
+  def up
+    create_table :approval_group_rules_users do |t|
+      t.bigint :approval_group_rule_id, null: false
+      t.bigint :user_id, null: false, index: true
+
+      t.index [:approval_group_rule_id, :user_id], unique: true, name: INDEX_RULE_USER
+    end
+  end
+
+  def down
+    drop_table :approval_group_rules_users
+  end
+end

db/migrate/20230926093025_add_approval_group_rules_protected_branches.rb

+# frozen_string_literal: true
+
+class AddApprovalGroupRulesProtectedBranches < Gitlab::Database::Migration[2.1]
+  INDEX_RULE_PROTECTED_BRANCH = 'idx_on_approval_group_rules_protected_branch'
+  INDEX_APPROVAL_GROUP_RULE = 'idx_on_approval_group_rules'
+  INDEX_PROTECTED_BRANCH = 'idx_on_protected_branch'
+
+  def up
+    create_table :approval_group_rules_protected_branches do |t|
+      t.bigint :approval_group_rule_id, null: false
+      t.bigint :protected_branch_id, null: false
+
+      t.index :protected_branch_id, name: INDEX_PROTECTED_BRANCH
+      t.index [:approval_group_rule_id, :protected_branch_id], unique: true, name: INDEX_RULE_PROTECTED_BRANCH
+    end
+  end
+
+  def down
+    drop_table :approval_group_rules_protected_branches
+  end
+end

db/migrate/20230926093101_add_fk_to_approval_rule_on_approval_group_rules_users.rb

+# frozen_string_literal: true
+
+class AddFkToApprovalRuleOnApprovalGroupRulesUsers < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :approval_group_rules_users,
+      :approval_group_rules,
+      column: :approval_group_rule_id,
+      on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :approval_group_rules_users, column: :approval_group_rule_id
+    end
+  end
+end

db/migrate/20230926093144_add_fk_to_user_on_approval_group_rules_users.rb

+# frozen_string_literal: true
+
+class AddFkToUserOnApprovalGroupRulesUsers < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :approval_group_rules_users, :users, column: :user_id, on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :approval_group_rules_users, column: :user_id
+    end
+  end
+end

db/migrate/20230926093211_add_fk_to_approval_rule_on_approval_group_rules_groups.rb

+# frozen_string_literal: true
+
+class AddFkToApprovalRuleOnApprovalGroupRulesGroups < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :approval_group_rules_groups, :approval_group_rules, column: :approval_group_rule_id,
+      on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :approval_group_rules_groups, column: :approval_group_rule_id
+    end
+  end
+end

db/migrate/20230926093251_add_fk_to_group_on_approval_group_rules_groups.rb

+# frozen_string_literal: true
+
+class AddFkToGroupOnApprovalGroupRulesGroups < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :approval_group_rules_groups, :namespaces, column: :group_id, on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :approval_group_rules_groups, column: :group_id
+    end
+  end
+end

db/migrate/20230926105440_add_fk_to_approval_rule_on_approval_group_rules_protected_branches.rb

+# frozen_string_literal: true
+
+class AddFkToApprovalRuleOnApprovalGroupRulesProtectedBranches < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :approval_group_rules_protected_branches,
+      :approval_group_rules,
+      column: :approval_group_rule_id,
+      on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :approval_group_rules_protected_branches, column: :approval_group_rule_id
+    end
+  end
+end

db/migrate/20230926105931_add_fk_to_protected_branch_on_approval_group_rules_protected_branches.rb

+# frozen_string_literal: true
+
+class AddFkToProtectedBranchOnApprovalGroupRulesProtectedBranches < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :approval_group_rules_protected_branches, :protected_branches,
+      column: :protected_branch_id, on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :approval_group_rules_protected_branches, column: :protected_branch_id
+    end
+  end
+end

db/migrate/20230928145555_add_fk_to_security_orchestration_policy_configuration_on_approval_group_rules.rb

+# frozen_string_literal: true
+
+class AddFkToSecurityOrchestrationPolicyConfigurationOnApprovalGroupRules < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :approval_group_rules, :security_orchestration_policy_configurations,
+      column: :security_orchestration_policy_configuration_id, on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :approval_group_rules,
+        column: :security_orchestration_policy_configuration_id
+    end
+  end
+end

db/migrate/20230928145637_add_fk_to_scan_result_policy_on_approval_group_rules.rb

+# frozen_string_literal: true
+
+class AddFkToScanResultPolicyOnApprovalGroupRules < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  def up
+    add_concurrent_foreign_key :approval_group_rules, :scan_result_policies,
+      column: :scan_result_policy_id, on_delete: :cascade
+  end
+
+  def down
+    with_lock_retries do
+      remove_foreign_key :approval_group_rules, column: :scan_result_policy_id
+    end
+  end
+end

db/schema_migrations/20230926092914

+0018bc2180eeb632d75132b6d82e959e772ff1e7d8966310858e304d07d4ec34
\ No newline at end of file

db/schema_migrations/20230926092944

+e2b4cdafd6147740ad43c286d90f7feec9f70d66a510d58a3cc3c33b0d703b49
\ No newline at end of file

db/schema_migrations/20230926093004

+d3d90178100e92cffe263715cdfc3c9ddcb47ce804f3ffd92d5bc4326de0244c
\ No newline at end of file

db/schema_migrations/20230926093025

+840bc159c277271b66f4348c31d912485c04b8ee1b15227c96dcc690f6b93311
\ No newline at end of file