- May 07, 2024
-
-
Clemens Beck authored
* Remove PostgreSQL 13 builds. * Remove unused PostgreSQL 12 build definition. * Move PostgreSQL 14 from 'new' to 'default' build definition. * Update minimum PostgreSQL version notice. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8341 Changelog: removed
-
- Apr 25, 2024
-
-
Stan Hu authored
https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7500 introduced a regression when a node with a managed Redis node has Sentinels configured in `gitlab_rails` section. Previously the `redis['default_host']` would only be set if `gitlab_rails['redis_sentinels']` were empty. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8465#note_1879691545 Changelog: fixed
-
- Apr 24, 2024
-
-
Gregorius Marco authored
https://gitlab.com/gitlab-com/gl-infra/scalability/-/issues/2220 Changelog: removed
-
- Apr 23, 2024
-
-
Ian Baum authored
Update default pages auth-redirect-uri when namespace-in-path is enabled See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7548 Merged-by:
Ian Baum <ibaum@gitlab.com> Approved-by:
Vladimir Shushlin <vshushlin@gitlab.com> Approved-by:
Mitchell Nielsen <mnielsen@gitlab.com> Approved-by:
Ian Baum <ibaum@gitlab.com> Co-authored-by:
ngala <ngala@gitlab.com>
-
- Apr 16, 2024
-
-
ngala authored
Related: https://gitlab.com/gitlab-org/gitlab/-/issues/452459+ Changelog: fixed
-
- Apr 20, 2024
-
-
Stan Hu authored
This is a small regression from https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7247. When the PostgreSQL upgrade times out, previously the script would error out with `wrong number of arguments (given 0, expected 1) (ArgumentError)`. Changelog: fixed
-
- Apr 15, 2024
-
-
Naman Jagdish Gala authored
Related: https://gitlab.com/gitlab-org/gitlab/-/issues/452459 Changelog: fixed
-
- Apr 11, 2024
-
-
Katrin Leinweber (GTLB) authored
Changelog: fixed
-
- Apr 15, 2024
-
-
Taka Nishida authored
- Removes code that blocked KAS service when GitLab is deployed in FIPS mode Related https://gitlab.com/gitlab-org/gitlab/-/issues/375327 Changelog: changed
-
- Apr 01, 2024
-
-
Stan Hu authored
As specified in https://redis.io/docs/management/config-file/, Redis can bind to multiple addresses with a space-separated field. Previously attempting to do this without setting `gitlab_rails['redis_host']` would fail because a URI could not be built with a space in the hostname. This commit now splits the string with the space and picks the first address as the default Redis host. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8465 Changelog: added
-
- Apr 10, 2024
-
-
Taka Nishida authored
Adds the gitlab_kas['grpc_log_level'] config option. Changelog: added
-
- Apr 09, 2024
-
-
Sylvester Chin authored
Changelog: changed
-
- Apr 08, 2024
-
-
Robert Marshall authored
Support TLS for kas->kas communication for KAS See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7453 Merged-by:
Robert Marshall <rmarshall@gitlab.com> Approved-by:
Timo Furrer <tfurrer@gitlab.com> Approved-by:
João Alexandre Cunha <j.a.cunha@gmail.com> Approved-by:
Robert Marshall <rmarshall@gitlab.com> Co-authored-by:
Taka Nishida <tnishida@gitlab.com>
-
Taka Nishida authored
Closes https://gitlab.com/gitlab-org/gitlab/-/issues/375327 Changelog: added
-
- Apr 03, 2024
-
-
Javiera Tapia authored
- Adds wrapper around `gitlab-backup-cli` command - Adds recipe and template for `gitlab-backup-cli` yaml configuration Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8273 Changelog: added
-
- Apr 01, 2024
-
-
Balasankar 'Balu' C authored
- Continue conversion to the new style redis helper with refactors against the redis server functionality methods Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Mar 27, 2024
-
-
Balasankar 'Balu' C authored
Do not warn if nothing is set and the default empty hash is returned for some configurations. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Feb 29, 2024
-
-
Ahmad Sherif authored
Currently, `gitlab_rails` service needs to be enabled in order for `gitaly` service to function properly. Specifically, `gitlab_rails` creates `git_data_dirs` (e.g. `/var/opt/gitlab/git-data/repositories`) which is needed for Gitaly to start-up. If only the `gitaly` service is enabled, then Gitaly won't start due to config validation error (i.e. storage directories have to be present). This MR makes the creation of these directories the responsibility of the `gitaly` cookbook. The `gitlab` cookbook still creates the directories as backward-compatibility measure, as I'm not sure if these directories are needed outside of Gitaly. This is needed as part of https://gitlab.com/gitlab-com/gl-infra/production-engineering/-/issues/24530. Changelog: fixed
-
- Mar 25, 2024
-
-
Clemens Beck authored
Postgres 14 is going to become our minimum supported version in GitLab 17. GitLab 16.11 turns on auto-upgrade for single node installs. Documentation change: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/147402 Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8340 Changelog: changed
-
- Mar 19, 2024
-
-
Robert Marshall authored
- Adds a command to re-apply SELinux file context rules based on the current GitLab provided SELinux policy. - Documents the existence of this new command. - Moves semanage tests into SELinuxHelper rspec and extends coverage for changes made to support the new command. Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7257 Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7452 Changelog: added Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
- Mar 13, 2024
-
-
Balasankar 'Balu' C authored
Refactor the GitLab Exporter recipe to calculate its redis configuration with the new helper library. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Mar 12, 2024
-
-
Sami Hiltunen authored
This commit adds a deprecation for 'omnibus_gitconfig'. Git configuration should be directly added under Gitaly's configuration as directed in the linked migration instructions. Configuring Git on a system or user level will no longer be supported through Omnibus. Related https://gitlab.com/gitlab-org/gitaly/-/issues/5132 Changelog: deprecated
-
- Feb 27, 2024
-
-
Ash McKenzie authored
The default for Linux kernels 5.4+ is 4096. Changelog: performance
-
- Feb 28, 2024
-
-
Ian Baum authored
Add config support for container registry garbage collection Closes #8438 See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7447 Merged-by:
Ian Baum <ibaum@gitlab.com> Approved-by:
Mitchell Nielsen <mnielsen@gitlab.com> Approved-by:
Ian Baum <ibaum@gitlab.com> Reviewed-by:
Ian Baum <ibaum@gitlab.com> Co-authored-by:
Fabio Huser <fabio.huser@siemens.com>
-
- Feb 22, 2024
-
-
Fabio Huser authored
- Allow administrators to configure garbage collection settings for the container registry Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8438 Changelog: added
-
- Feb 27, 2024
-
-
dependencies.io Bot authored
Changelog: changed
-
Ahmad Sherif authored
Administrators may now set `gitlab` configuration values directly rather than rely on automatic calculations from the rails service. Related https://gitlab.com/gitlab-com/gl-infra/production-engineering/-/issues/24530 Changelog: added
-
- Feb 22, 2024
-
-
Naman Jagdish Gala authored
In cases where namespace_in_path is enabled and the host URL is duplicated in the URL path, users were being redirected to a malformed URL. This fix ensures that only the namespace is selected without including the forward slash (/), preventing unwanted URL redirects. Related: https://gitlab.com/gitlab-org/gitlab/-/issues/440465+ Changelog: fixed
-
- Feb 19, 2024
-
-
Balasankar 'Balu' C authored
Add active directory + smart card settings to gitlab.yml See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7422 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Jason Plum <jplum@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Andrew Patterson <apatterson@gitlab.com> Co-authored-by:
agius <andrew@atevans.com>
-
Andrew Evans authored
An upcoming change in GitLab will introduce two new settings in the `ldap:` -> `servers:` subsections, to allow authenticating users via smart card against LDAP servers that are Active Directory based. The configuration is per-server-specific, so should be placed in the same configuration block as other LDAP settings. This change exposes the new settings and adds defaults to omnibus. The `smartcard_ad_cert_format` setting should default to `nil` / off, and administrators must opt-in to the new behavior by configuring a value for it. Changelog: added
-
- Feb 15, 2024
-
-
Hossein Pursultani authored
changelog: changed
-
Robert Marshall authored
- Create a single versioned SELinux policy module for GitLab similar to other policy module components. - The first iteration of the consolidated policy is opt-in if the user sets `package['selinux_policy_version'] to anything other than nil. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7453 Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8235 Changelog: changed Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
- Feb 14, 2024
-
-
dependencies.io Bot authored
Changelog: changed
-
- Feb 13, 2024
-
-
Ash McKenzie authored
Add the gitlab_workhorse['metadata_zip_reader_limit_bytes'] configuration option for workhorse. Related https://gitlab.com/gitlab-org/gitlab/-/issues/439016 Changelog: added Signed-off-by:
Ash McKenzie <amckenzie@gitlab.com>
-
- Feb 08, 2024
-
-
Gregorius Marco authored
A new `sidekiq['concurrency']` is added as a simpler option since we dont longer need varying concurrency based on number of queues https://gitlab.com/gitlab-com/gl-infra/scalability/-/issues/2760 Changelog: deprecated
-
- Jan 04, 2024
-
-
Stan Hu authored
This commit adds support for using redis-exporter with an external Redis instance when enabled via: ``` redis_exporter['enable'] = true ``` Omnibus GitLab disables redis-exporter if the bundled Redis instance is disabled, but previously when redis-exporter were enabled it would always attempt to talk to a local UNIX socket. This commit has been tested with Google Memorystore with TLS enabled. Note that TLS client auth is not yet supported.
-
- Jan 31, 2024
-
-
Ian Baum authored
* Running these steps before geo_pg_upgrade is called breaks the upgrade of the geo-postgresql database Changelog: fixed
-
- Jan 26, 2024
-
-
Balasankar 'Balu' C authored
Add support for using HTTP TLS client cert See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7349 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Approved-by:
Andrew Patterson <apatterson@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Reviewed-by:
Clemens Beck <cbeck@gitlab.com> Co-authored-by:
Stan Hu <stanhu@gmail.com>
-
Stan Hu authored
Some customers need to configure mutual TLS authentication for Webhooks. This commit adds support for an instance-wide client certificate via two settings added in https://gitlab.com/gitlab-org/gitlab/-/merge_requests/140263: ```ruby gitlab_rails['http_client']['tls_client_cert_file'] = '/path/to/cert.pem' gitlab_rails['http_client']['tls_client_cert_password'] = 'somepassword' ``` Relates to: * https://gitlab.com/gitlab-org/gitlab/-/issues/27450 * https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8356 Changelog: added
-
Balasankar 'Balu' C authored
Registry: add database primary configuration See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7262 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Approved-by:
Andrew Patterson <apatterson@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Suleimi Ahmed <sahmed@gitlab.com>
-