- Dec 04, 2024
-
-
Timo Furrer authored
This change set generates and configures a new secret for KAS. It's used to sign and verify the WebSocket Token secret. Refs: - https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/issues/641 - https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/issues/644 - https://gitlab.com/gitlab-org/charts/gitlab/-/issues/5720 Changelog: added
-
- Apr 15, 2024
-
-
Balasankar 'Balu' C authored
All the usecases of old RedisHelper has been migrated to NewRedisHelper. Drop the old RedisHelper and rename NewRedisHelper to replace it. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Apr 10, 2024
-
-
Taka Nishida authored
Adds the gitlab_kas['grpc_log_level'] config option. Changelog: added
-
- Jan 11, 2024
-
-
Balasankar 'Balu' C authored
- Adds the `gitlab_kas['extra_config_command']` config option for `gitlab.rb` Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8355 Changelog: added Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Jan 05, 2024
-
-
Balasankar 'Balu' C authored
Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Oct 03, 2023
-
-
Balasankar "Balu" C authored
Changelog: added Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Changelog: changed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Oct 17, 2023
-
-
Harshit Prasad authored
-
- Sep 29, 2023
-
-
Andrew Patterson authored
if it has been stopped with the gitlab-ctl stop command. Changelog: fixed
-
- Aug 09, 2023
-
-
Mikhail Mazurskiy authored
Push notifications reduce the need to poll this often. Change is also reflected in application defaults. Related https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/merge_requests/1046 Changelog: changed
-
- Jun 15, 2023
-
-
Balasankar 'Balu' C authored
- Adds option: package['generate_default_secrets'] = true - Adds option: package['generate_secrets_json_file'] = true - The options control whether or not secrets are generated and written to `JSON` by Omnibus during installation and reconfigure. - Feature is not yet intended for usage in a self-managed instance Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7700 Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Jun 14, 2023
-
-
Stan Hu authored
This commit adds a separate password parameter for each Sentinel group and enables GitLab Rails, Workhorse, and `gitlab-kas` to use a password specified in `requirepass` in the Sentinel configuration: ```ruby gitlab_rails['redis_sentinels_password'] gitlab_rails['redis_cache_sentinels_password'] gitlab_rails['redis_queues_sentinels_password'] gitlab_rails['redis_shared_state_sentinels_password'] gitlab_rails['redis_trace_chunks_sentinels_password'] gitlab_rails['redis_actioncable_sentinels_password'] gitlab_rails['redis_rate_limiting_sentinels_password'] gitlab_rails['redis_sessions_sentinels_password'] gitlab_rails['redis_cluster_rate_limiting_sentinels_password'] gitlab_rails['redis_repository_cache_sentinels_password'] ``` We could avoid these extra configuration parameters by having the admin specify a `password` parameter for each host/port combination in `redis_sentinels`, `redis_cache_sentinels`, etc. However, this would add much duplication in the configuration and different passwords aren't actually supported by Redis Sentinel. gitlab-kas also expects a single Sentinel password stored in the `sentinel_password_file` configuration parameter. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/235938 Changelog: added
-
- May 04, 2023
-
-
Jason Young authored
Changelog: added Signed-off-by:
Jason Young <jyoung@gitlab.com>
-
- Apr 28, 2023
-
-
Balasankar 'Balu' C authored
Use underscored key names in all rails key configuration invocations. Removes un-used rails_app variable abstraction. Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6873 Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7455 Changelog: deprecated Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Apr 06, 2023
-
-
Timo Furrer authored
Add configuration key to set `gitlab.external_url` in KAS in support of cross origin resource sharing (CORS) requests. Changelog: changed
-
- Mar 28, 2023
-
-
Balasankar 'Balu' C authored
Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6873 Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7455 Changelog: deprecated Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Mar 13, 2023
-
-
Balasankar 'Balu' C authored
Expand allowed gitlab_kas['internal_api_listen_network'] See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6726 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Jason Young <jyoung@gitlab.com> Co-authored-by:
Hordur Freyr Yngvason <hfyngvason@gitlab.com>
-
- Mar 07, 2023
-
-
Hordur Freyr Yngvason authored
In particular, we want to add support for unix sockets to simplify single-node configurations where there is a proxy. Changelog: changed
-
- Mar 13, 2023
-
-
Pam Artiaga authored
Support the use of a dedicated sub-domain for the GitLab Agent Server (KAS) address by setting the kas url through the `gitlab_kas_external_url` configuration. Changelog: changed
-
- Jun 30, 2022
-
-
Olaf Meeuwissen authored
Changelog: fixed
-
- May 02, 2022
-
-
Hordur Freyr Yngvason authored
By default, this server listens only on localhost. But when using an external load balancer, the server needs to accept connections from the load balancer for health checks (for example, by by listening on 0.0.0.0). Changelog: added
-
- Apr 15, 2022
-
-
Dmytro Makovey authored
Mark credentials that may appear in plain text as sensitive to mask them in the output from gitlab-ctl reconfigure and stacktraces. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6124 Changelog: security
-
- Mar 02, 2022
-
-
Hordur Freyr Yngvason authored
The default KAS log level is 'info', but when troubleshooting we usually want it to be 'debug'. So this option needs to be exposed to users. Changelog: added
-
- Feb 11, 2022
-
-
Fabio Huser authored
Related to https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/issues/7 and https://gitlab.com/gitlab-org/gitlab/-/issues/280518. This commit adds the capability to configure custom TLS certificates and private key files for the GitLab KAS service. It allows to define individual certificate/ key bundles for each of GitLab KAS's APIs. Changelog: added
-
- Jan 09, 2022
-
-
Fabio Huser authored
This commit adds new `gitlab_kas['sentry_dsn']` and `gitlab_kas['sentry_environment']` configuration options, allowing to enable Sentry error tracking for GitLab KAS. It supports setting the Sentry DSN as well as an optional environment, as it's also the case for other GitLab services. Changelog: added
-
Fabio Huser authored
Using gitlab-kas with an external redis instance (`gitlab_rails['redis_host']` set to e.g. `my-redis`) but default port configuration (`gitlab_rails['redis_port']` not set) leads to an invalid redis hostname/port combination (e.g. `my-redis:` instead of `my-redis:6379`). This configuration works perfectly fine for other GitLab services (e.g. workhorse, gitlab-rails) and is also covered by unit-tests (see spec/libraries/redis_helper_spec.rb#59). Those services rely on the `redis_url` method which properly omits the default redis port completely, whereas gitlab-kas derives the hostname/port combination from the two values directly but not taking a default port value into account. This commit changes that behavior by adding a fall-back default redis port, in case no custom one is set and the tcp connection method is used. Changelog: fixed
-
- Jan 08, 2022
-
-
Fabio Huser authored
The GitLab Nginx templates uses the non-changeable routes `-/kubernetes-agent/` and `-/kubernetes-agent/k8s-proxy/` for KAS/KAS K8s API proxy forwarding. Both routes use trailing slashes while the GitLab rails configuration by default generates routes without trailing slashes. This will cause GitLab to generate a KAS configuration with invalid target URL, causing a connection failure as the server returns a HTTP 301 instead of 101. This commit syncs the temples to consistently using a trailing slash. Besides that, two other minor points were addressed: - The `gitlab_kas_external_k8s_proxy_url` example in `gitlab.rb.template` wrongly used the `wss://` schema but is in fact a reverse proxy for a K8s API. This was corrected to use `https://` instead. - The inline comment in `gitlab_kas.rb` used a wrong path reference. This was corrected as well Changelog: fixed
-
- Dec 07, 2021
-
-
DJ Mountney authored
Add TLS to redis config where required See merge request gitlab-org/omnibus-gitlab!5632 Changelog: changed MR: https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/5632
-
- Sep 22, 2021
-
-
Lewis Cowper authored
Based on the kascfg.proto block[1], enabling TLS support for an external redis host requires changes to the gitlab-kas-config.yml template. [1](https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/blob/master/pkg/kascfg/kascfg.proto#L268-279),
-
- Nov 08, 2021
-
-
Hordur Freyr Yngvason authored
Changelog: added
-
- Mar 12, 2021
-
-
Hordur Freyr Yngvason authored
See https://gitlab.com/gitlab-org/gitlab/-/issues/299850 Changelog: changed
-
- Jan 28, 2021
-
-
Hordur Freyr Yngvason authored
-
- Dec 07, 2020
-
-
Mikhail Mazurskiy authored
-
- Nov 11, 2020
-
-
Thong Kuah authored
- listen -> listen_agent - metrics -> observability
-
- Oct 08, 2020
-
-
Matt Kasa authored
Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/223060
-