Skip to content
Snippets Groups Projects
  1. Dec 18, 2024
  2. Nov 15, 2024
    • Andrew Patterson's avatar
      Disallow login for mattermost account · d4bce1d32866
      Andrew Patterson authored
      Change login shell for mattermost account to
      nologin to stop CIS from triggering rule 6.2.8
      "Ensure users' home directories permissions are
      750 or more restrictive".
      d4bce1d32866
  3. Dec 18, 2024
  4. Dec 12, 2024
    • Andrew Patterson's avatar
      Disallow login for consul account · 33a466012ab8
      Andrew Patterson authored
      Change login shell for consul account to nologin
      to stop CIS from triggering rule 6.2.8 "Ensure
      users' home directories permissions are 750 or
      more restrictive".
      
      Changelog: changed
      33a466012ab8
  5. Dec 04, 2024
  6. Dec 03, 2024
  7. Nov 08, 2024
  8. Oct 18, 2024
  9. Nov 05, 2024
    • Stan Hu's avatar
      Make ActionCable Redis settings use default Redis Sentinel password · 6c142799e37c
      Stan Hu authored
      Suppose you have this config:
      
      ```
      gitlab_rails['redis_sentinels'] = [
        {"host"=>"gitlabtest-cluster-redis-01", "port"=>26379},
        {"host"=>"gitlabtest-cluster-redis-02", "port"=>26379},
        {"host"=>"gitlabtest-cluster-redis-03", "port"=>26379}
      ]
      gitlab_rails['redis_sentinels_password'] = "some password"
      redis['enable'] = false
      redis['master_name'] = "gitlab-redis"
      redis['master_password'] = "some password"
      ```
      
      Previously ActionCable Redis settings would only look for
      `gitlab_rails['redis_actioncable_sentinels_password']` and did
      not fall back to `gitlab_rails['redis_sentinels_password']`.
      
      Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8728
      
      Changelog: fixed
      6c142799e37c
  10. Oct 22, 2024
  11. Sep 20, 2024
  12. Sep 19, 2024
  13. Sep 11, 2024
  14. Sep 18, 2024
  15. Sep 17, 2024
  16. Sep 04, 2024
  17. Aug 26, 2024
  18. Aug 23, 2024
  19. Aug 21, 2024
  20. Aug 19, 2024
  21. Aug 14, 2024
  22. Aug 13, 2024
  23. Aug 01, 2024
  24. Aug 06, 2024
  25. Jul 15, 2024
  26. Jul 11, 2024
  27. Jul 15, 2024
  28. Jul 12, 2024
  29. Jun 30, 2024
  30. Apr 15, 2024
  31. Jul 12, 2024
  32. Jul 10, 2024
  33. Apr 08, 2024
  34. Jun 26, 2024
    • Stan Hu's avatar
      Attempt to retry twice to determine Redis server version · 91afd5f5b826
      Stan Hu authored
      We had two different customers upgrade GitLab and run into `stderr:
      Error: Connection reset by peer` when attempting to determine the
      Redis version. This appears to have occurred because `gitlab-ctl
      reconfigure` can restart Redis right before it checks the version.
      This causes the `gitlab-ctl reconfigure` to fail outright.
      
      To avoid this failure mode, set the Chef `retries` parameter to 2. By
      default the `retry_delay` is 2 seconds.
      
      Relates to
      https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8597
      
      Changelog: fixed
      91afd5f5b826
  35. Jun 27, 2024
    • Stan Hu's avatar
      Fix Redis password handling with reserved characters · ba009e3bf187
      Stan Hu authored
      Previously including reserved characters such as `@` in the Redis
      password would fail because `URI::Generic::DEFAULT_PARSER.escape` did
      not consider `@` unsafe, which it generally isn't per RFC 2396 and
      3986. However, the `@` is not allowed in the userinfo field, and the
      URI builder for Ruby fails if using a reserved character were
      included.
      
      To fix this, use `ERB.url_encode`, which always escapes any
      non-alphanumeric string.
      
      Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8602
      
      Changelog: fixed
      ba009e3bf187
  36. Jun 04, 2024
  37. Jun 24, 2024
Loading