- Dec 18, 2024
-
-
Balasankar 'Balu' C authored
Disallow login for mattermost account See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/8034 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Alec Xu <axu@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Andrew Patterson <apatterson@gitlab.com>
-
- Nov 15, 2024
-
-
Andrew Patterson authored
Change login shell for mattermost account to nologin to stop CIS from triggering rule 6.2.8 "Ensure users' home directories permissions are 750 or more restrictive".
-
- Dec 18, 2024
-
-
Lin Jen-Shin authored
Co-authored-by:
Andrew Patterson <apatterson@gitlab.com>
-
- Dec 12, 2024
-
-
Andrew Patterson authored
Change login shell for consul account to nologin to stop CIS from triggering rule 6.2.8 "Ensure users' home directories permissions are 750 or more restrictive". Changelog: changed
-
- Dec 04, 2024
-
-
Timo Furrer authored
This change set generates and configures a new secret for KAS. It's used to sign and verify the WebSocket Token secret. Refs: - https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/issues/641 - https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/issues/644 - https://gitlab.com/gitlab-org/charts/gitlab/-/issues/5720 Changelog: added
-
- Dec 03, 2024
-
-
Ian Baum authored
* Restoring a database via pg_dump could leave the owner set incorrectly, preventing pgbouncer from being able to authenticate users Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8819 Changelog: fixed
-
- Nov 08, 2024
-
-
Rémy Coutable authored
Changelog: added Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
- Oct 18, 2024
-
-
Clemens Beck authored
Deprecations for 17.9: * openSUSE Leap 15.5: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8778 Deprecations for 17.8: * Oracle Linux 7: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8746 * PiOS Buster: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8734 * Scientific Linux: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8745 * CentOS 7: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8714
-
- Nov 05, 2024
-
-
Stan Hu authored
Suppose you have this config: ``` gitlab_rails['redis_sentinels'] = [ {"host"=>"gitlabtest-cluster-redis-01", "port"=>26379}, {"host"=>"gitlabtest-cluster-redis-02", "port"=>26379}, {"host"=>"gitlabtest-cluster-redis-03", "port"=>26379} ] gitlab_rails['redis_sentinels_password'] = "some password" redis['enable'] = false redis['master_name'] = "gitlab-redis" redis['master_password'] = "some password" ``` Previously ActionCable Redis settings would only look for `gitlab_rails['redis_actioncable_sentinels_password']` and did not fall back to `gitlab_rails['redis_sentinels_password']`. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8728 Changelog: fixed
-
- Oct 22, 2024
-
-
Balasankar 'Balu' C authored
Changelog: added Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Sep 20, 2024
-
-
Vasilii Iakliushin authored
New configuration options were added to gitlab-shell: https://gitlab.com/gitlab-org/gitlab-shell/-/merge_requests/1141. Adds an option to configure them in Omnibus. Related https://gitlab.com/gitlab-org/gitlab/-/issues/460290 Changelog: added
-
- Sep 19, 2024
-
-
Balasankar 'Balu' C authored
Remove 'ci_jwt_signing_key' secret migrated to ApplicationSetting See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7930 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Rémy Coutable <remy@rymai.me>
-
- Sep 11, 2024
-
-
Rémy Coutable authored
Changelog: removed Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
- Sep 18, 2024
-
-
Balasankar 'Balu' C authored
- Process roles that require GitLab Rails first. - Do not automatically run GitLab Rails for all roles at installation or reconfigure. - Ensure Patroni and Postgres roles can still perform the required database creation tasks. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8692 Changelog: changed Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
Garrod Alwood authored
Changelog: changed
-
- Sep 17, 2024
-
-
Balasankar 'Balu' C authored
Rather than re-use the attribute from GitLab Shell, Gitaly stores the token it uses to authenticate with GitLab under a unique attribute. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8688 Changelog: changed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Sep 04, 2024
-
-
Ben Bodenmiller authored
Changelog: changed
-
- Aug 26, 2024
-
-
Clemens Beck authored
The postgres_exporter['per_table_stats'] was deprecated in 16.4 and removed in 17.1. With an upgrade stop at 17.3, the deprecation message can now be can be removed. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8170
-
- Aug 23, 2024
-
-
Balasankar 'Balu' C authored
- Adds CentOS 7 deprecation warning. Changelog: deprecated Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Aug 21, 2024
-
-
Yu Shao Pang (SQPC) authored
Changelog: added
-
- Aug 19, 2024
-
-
Andrew Patterson authored
Debian 10 (Buster) has gone EOL, so add it to the deprecated OS list. Changelog: deprecated
-
- Aug 14, 2024
-
-
Ash McKenzie authored
Changelog: deprecated
-
- Aug 13, 2024
-
-
Balasankar 'Balu' C authored
Remove deprecation message for sidekiq queue_selector and negate Closes #8495 See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7825 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Lucas Li <lli@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Gregorius Marco <gmarco@gitlab.com>
-
- Aug 01, 2024
-
-
Gregorius Marco authored
-
Gregorius Marco authored
Resolves https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8491
-
- Aug 06, 2024
-
-
Naman Jagdish Gala authored
- Allow administrators to set a list of CIDR addresses that can bypass the rate limit. Related: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8649 Changelog: added
-
- Jul 15, 2024
-
-
Ian Baum authored
Add cronjob to sync finished pipelines to ClickHouse See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7783 Merged-by:
Ian Baum <ibaum@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Approved-by:
Ian Baum <ibaum@gitlab.com> Reviewed-by:
Ian Baum <ibaum@gitlab.com> Co-authored-by:
Pedro Pombeiro <noreply@pedro.pombei.ro>
-
- Jul 11, 2024
-
-
Pedro Pombeiro authored
-
- Jul 15, 2024
-
-
Clemens Beck authored
Remove the Grafana deprecation message which was accidentally re-added in https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7550. Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8601 Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8200
-
- Jul 12, 2024
-
-
Robert Marshall authored
Add support for configuring Redis client timeouts See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7749 Merged-by:
Robert Marshall <rmarshall@gitlab.com> Approved-by:
Alec Xu <axu@gitlab.com> Approved-by:
Robert Marshall <rmarshall@gitlab.com> Reviewed-by:
Robert Marshall <rmarshall@gitlab.com> Co-authored-by:
Stan Hu <stanhu@gmail.com>
-
- Jun 30, 2024
-
-
Stan Hu authored
For some installations, the default 1-second Redis connect timeout may not be sufficient. Just as PostgreSQL has the ability to configure the connection timeout, add the same for Redis. Include read and write timeout options for completness. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/466271 Changelog: added
-
- Apr 15, 2024
-
-
Balasankar 'Balu' C authored
All the usecases of old RedisHelper has been migrated to NewRedisHelper. Drop the old RedisHelper and rename NewRedisHelper to replace it. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Jul 12, 2024
-
-
Ash McKenzie authored
Adds configuration support for Pure-SSH LFS protocol via the `gitlab_shell['lfs_pure_ssh_protocol']` option. Closes https://gitlab.com/gitlab-org/gitlab-shell/-/issues/773 Changelog: added
-
- Jul 10, 2024
-
-
Naman Jagdish Gala authored
- Migrates domain redirect and resolution logic for Pages into the Pages binary from the nginx configuration file template. Related: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8581+ Changelog: added
-
- Apr 08, 2024
-
-
Balasankar 'Balu' C authored
Drop the uses of old RedisHelper class to move everything to the NewRedisHelper logic Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
Balasankar 'Balu' C authored
Certain methods in the Redis Helper are to be used in libraries also, where the node object is unavailable. In those scenarios, the methods have to work with the Gitlab object. Make those methods class methods that take a config hash as argument. Also create instance methods with same name, which call these class methods and pass the node object as argument. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Jun 26, 2024
-
-
Stan Hu authored
We had two different customers upgrade GitLab and run into `stderr: Error: Connection reset by peer` when attempting to determine the Redis version. This appears to have occurred because `gitlab-ctl reconfigure` can restart Redis right before it checks the version. This causes the `gitlab-ctl reconfigure` to fail outright. To avoid this failure mode, set the Chef `retries` parameter to 2. By default the `retry_delay` is 2 seconds. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8597 Changelog: fixed
-
- Jun 27, 2024
-
-
Stan Hu authored
Previously including reserved characters such as `@` in the Redis password would fail because `URI::Generic::DEFAULT_PARSER.escape` did not consider `@` unsafe, which it generally isn't per RFC 2396 and 3986. However, the `@` is not allowed in the userinfo field, and the URI builder for Ruby fails if using a reserved character were included. To fix this, use `ERB.url_encode`, which always escapes any non-alphanumeric string. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8602 Changelog: fixed
-
- Jun 04, 2024
-
-
Will Chandler authored
57396c7ab (Prevent Gitaly storages from using the same path, 2024-05-09) added a check to validate that only one storage is associated with a given filesystem path. We have received a customer report[0] that the error message used is confusing. Update the message to make it clear what the problem is. [0] https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8565
-
- Jun 24, 2024
-
-
Balasankar 'Balu' C authored
Disable request buffering for new SSH endpoints See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7713 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Vasilii Iakliushin <viakliushin@gitlab.com>
-