Merge branch 'dblessing-resource-access-token-feature-move' into 'master'

Move resource_access_tokens to development feature flag

See merge request gitlab-org/gitlab!46376

config/feature_flags/licensed/resource_access_token.yml → config/feature_flags/development/resource_access_token_feature.yml

 ---
-name: resource_access_token
+name: resource_access_token_feature
 introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/29622
 rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/235765
 group: group::access
-type: licensed
+type: development
 default_enabled: true

config/initializers/0_inject_feature_flags.rb

@@ -14,7 +14,6 @@ if Gitlab.ee? && Gitlab.dev_or_test_env?
   # being unique to licensed names. These feature flags should be reworked to
   # be "development" with explicit check
   IGNORED_FEATURE_FLAGS = %i[
-    resource_access_token
     ci_secrets_management
     feature_flags_related_issues
     group_coverage_reports

ee/app/policies/ee/group_policy.rb

@@ -339,7 +339,8 @@ module EE
     def resource_access_token_available?
       return true unless ::Gitlab.com?
 
-      group.feature_available_non_trial?(:resource_access_token)
+      ::Feature.enabled?(:resource_access_token_feature, group, default_enabled: true) &&
+        group.feature_available_non_trial?(:resource_access_token)
     end
   end
 end

ee/app/policies/ee/project_policy.rb

@@ -356,7 +356,10 @@ module EE
     def resource_access_token_available?
       return true unless ::Gitlab.com?
 
-      project.namespace.feature_available_non_trial?(:resource_access_token)
+      group = project.namespace
+
+      ::Feature.enabled?(:resource_access_token_feature, group, default_enabled: true) &&
+        group.feature_available_non_trial?(:resource_access_token)
     end
   end
 end

ee/spec/models/ee/namespace_spec.rb

@@ -401,7 +401,6 @@ RSpec.describe Namespace do
 
       before do
         create(:gitlab_subscription, :active_trial, namespace: group, hosted_plan: hosted_plan)
-        stub_licensed_features(feature => true)
         stub_ee_application_setting(should_check_namespace_plan: true)
       end