qa-e2e-ui

QA - E2E UI (live cluster)

Overview

This skill validates that the Sentinel dashboard actually works as a user experience against the real UI + API + Traefik stack. Curl checks are useful smoke gates, but they are not a substitute for browser interaction. Use Playwright and Chrome DevTools MCP whenever available to collect:

• accessibility snapshots for actionable element names and roles
• browser console messages
• network request/response evidence for UI-triggered API calls
• screenshots for visual regressions and responsive layout failures
• keyboard interaction evidence for reachable controls

services/ui/main_test.go covers handler-level behavior. This skill covers browser-visible workflows: role-gated navigation, session transitions, forms, filters, tables, modals, copy controls, destructive actions, public-host defenses, and whether rendered UI data matches backend truth.

Header / CSP / lockout / secret-leak checks live in qa-e2e-security; do not duplicate them here unless the symptom is visible in the UI.

Regression evidence contract: a UI pass needs browser evidence, not only curl or unit tests. For changed auth, role, or API-key behavior, cover both a user-identity session and a no-user-identity or denied session so role-gating regressions surface before merge. If browser automation is unavailable, report the UI result blocked.

Phase-gate rule: any change under services/ui/, services/ui/frontend/, services/ui/static/, UI ingress manifests, or a backend path rendered by the dashboard requires this skill. Run the same browser workflow once against the pre-change deployment and once against the candidate deployment. A phase is not passed by unit tests alone.

Step 1 - Confirm preconditions

Do not reinstall the platform or run codegen as part of UI QA. The live cluster is the source of truth.

kubectl config current-context | grep -qx kind-mcp-runtime \
  || { echo "Run qa-cluster-bringup first"; exit 1; }

curl -fsS -o /dev/null http://localhost:18080/ \
  || { echo "Traefik port-forward not running; run: kubectl port-forward -n traefik svc/traefik 18080:8000"; exit 1; }

./bin/mcp-runtime status