- Jan 10, 2025
-
-
Stan Hu authored
This avoids leaking SMTP credentials during `gitlab-ctl reconfigure`. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8867 Changelog: fixed
-
- Dec 18, 2024
-
-
Lin Jen-Shin authored
Co-authored-by:
Andrew Patterson <apatterson@gitlab.com>
-
- Nov 08, 2024
-
-
Rémy Coutable authored
Changelog: added Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
- Nov 05, 2024
-
-
Stan Hu authored
Suppose you have this config: ``` gitlab_rails['redis_sentinels'] = [ {"host"=>"gitlabtest-cluster-redis-01", "port"=>26379}, {"host"=>"gitlabtest-cluster-redis-02", "port"=>26379}, {"host"=>"gitlabtest-cluster-redis-03", "port"=>26379} ] gitlab_rails['redis_sentinels_password'] = "some password" redis['enable'] = false redis['master_name'] = "gitlab-redis" redis['master_password'] = "some password" ``` Previously ActionCable Redis settings would only look for `gitlab_rails['redis_actioncable_sentinels_password']` and did not fall back to `gitlab_rails['redis_sentinels_password']`. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8728 Changelog: fixed
-
- Sep 20, 2024
-
-
Vasilii Iakliushin authored
New configuration options were added to gitlab-shell: https://gitlab.com/gitlab-org/gitlab-shell/-/merge_requests/1141. Adds an option to configure them in Omnibus. Related https://gitlab.com/gitlab-org/gitlab/-/issues/460290 Changelog: added
-
- Sep 11, 2024
-
-
Rémy Coutable authored
Changelog: removed Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
- Jul 12, 2024
-
-
Robert Marshall authored
Add support for configuring Redis client timeouts See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7749 Merged-by:
Robert Marshall <rmarshall@gitlab.com> Approved-by:
Alec Xu <axu@gitlab.com> Approved-by:
Robert Marshall <rmarshall@gitlab.com> Reviewed-by:
Robert Marshall <rmarshall@gitlab.com> Co-authored-by:
Stan Hu <stanhu@gmail.com>
-
- Jun 30, 2024
-
-
Stan Hu authored
For some installations, the default 1-second Redis connect timeout may not be sufficient. Just as PostgreSQL has the ability to configure the connection timeout, add the same for Redis. Include read and write timeout options for completness. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/466271 Changelog: added
-
- Apr 15, 2024
-
-
Balasankar 'Balu' C authored
All the usecases of old RedisHelper has been migrated to NewRedisHelper. Drop the old RedisHelper and rename NewRedisHelper to replace it. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Jul 12, 2024
-
-
Ash McKenzie authored
Adds configuration support for Pure-SSH LFS protocol via the `gitlab_shell['lfs_pure_ssh_protocol']` option. Closes https://gitlab.com/gitlab-org/gitlab-shell/-/issues/773 Changelog: added
-
- Jun 24, 2024
-
-
Ian Baum authored
* Creates the gitlab-backup user and groups if they dont' exist * Adds the user to other groups * For use by gitlab-backup-cli for read/write permission to data for backups and restores Changelog: added
-
- Jun 11, 2024
-
-
Balasankar 'Balu' C authored
Allows the ActionCable configuration to receive its redis configuration from an external command. Changelog: added Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- May 29, 2024
-
-
Balasankar 'Balu' C authored
Add ability to prefix session cookies See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7605 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Bojan Marjanovic <bmarjanovic@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Reviewed-by:
Omar Qunsul <oqunsul@gitlab.com> Reviewed-by:
Bojan Marjanovic <bmarjanovic@gitlab.com> Co-authored-by:
Omar Qunsul <oqunsul@gitlab.com>
-
Omar Qunsul authored
Addressing: https://gitlab.com/gitlab-org/gitlab/-/issues/439945 Changelog: added
-
- May 15, 2024
-
-
Balasankar 'Balu' C authored
- Moves the Gitlab Rails library to use the new redis helper logic code path. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- May 09, 2024
-
-
Balasankar 'Balu' C authored
- Adds much more detail around the process that happens when gitlab-ctl reconfigure executes. - Adds notes to the recipes to clarify what happens in the context of a reconfigure run. Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- May 07, 2024
-
-
Clemens Beck authored
* Remove PostgreSQL 13 builds. * Remove unused PostgreSQL 12 build definition. * Move PostgreSQL 14 from 'new' to 'default' build definition. * Update minimum PostgreSQL version notice. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8341 Changelog: removed
-
- Apr 03, 2024
-
-
Javiera Tapia authored
- Adds wrapper around `gitlab-backup-cli` command - Adds recipe and template for `gitlab-backup-cli` yaml configuration Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8273 Changelog: added
-
- Feb 29, 2024
-
-
Ahmad Sherif authored
Currently, `gitlab_rails` service needs to be enabled in order for `gitaly` service to function properly. Specifically, `gitlab_rails` creates `git_data_dirs` (e.g. `/var/opt/gitlab/git-data/repositories`) which is needed for Gitaly to start-up. If only the `gitaly` service is enabled, then Gitaly won't start due to config validation error (i.e. storage directories have to be present). This MR makes the creation of these directories the responsibility of the `gitaly` cookbook. The `gitlab` cookbook still creates the directories as backward-compatibility measure, as I'm not sure if these directories are needed outside of Gitaly. This is needed as part of https://gitlab.com/gitlab-com/gl-infra/production-engineering/-/issues/24530. Changelog: fixed
-
- Feb 15, 2024
-
-
Robert Marshall authored
- Create a single versioned SELinux policy module for GitLab similar to other policy module components. - The first iteration of the consolidated policy is opt-in if the user sets `package['selinux_policy_version'] to anything other than nil. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7453 Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8235 Changelog: changed Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
- Feb 13, 2024
-
-
Ash McKenzie authored
Add the gitlab_workhorse['metadata_zip_reader_limit_bytes'] configuration option for workhorse. Related https://gitlab.com/gitlab-org/gitlab/-/issues/439016 Changelog: added Signed-off-by:
Ash McKenzie <amckenzie@gitlab.com>
-
- Jan 23, 2024
-
-
Balasankar 'Balu' C authored
Adds the gitlab_rails['redis_extra_config_command'] option along with the same option for separated redis instances. Changelog: added Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Jan 11, 2024
-
-
Balasankar 'Balu' C authored
- Adds the `gitlab_workhorse['extra_config_command']` config option for gitlab.rb Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8363 Changelog: added Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Dec 11, 2023
-
-
Will Chandler authored
Originally Gitaly would shell out to Gitlab-Shell to make internal API calls. This had no retained state regarding the secret token, so no service restarts were required in this scenario. However, for several years the main Gitaly process has been responsible for calling the internal API. This will only read the Gitlab-Shell secret file during its startup process, and subsequent changes to that will not be detected by Gitaly, leading to spurious 401 errors. To resolve this, restart the Gitaly service when updating `gitlab_shell['secret_token']`. Changelog: fixed
-
- Dec 12, 2023
-
-
Andrew Patterson authored
Add the generate-secrets command to gitlab-ctl which creates a JSON file containing secrets from the gitlab.rb file. The -f|--file option can be used to send the output to a specified file instead of the default /etc/gitlab/gitlab-secrets.json. Changelog: added
-
- Dec 04, 2023
-
-
Balasankar 'Balu' C authored
Make GitLab Workhorse use the new RedisHelper architecture. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Dec 06, 2023
-
-
Naman Jagdish Gala authored
Related to: https://gitlab.com/gitlab-org/gitlab/-/issues/17584 Adds the 'namespace_in_path' parameter in gitlab.rb for GitLab Pages. This parameter is used to rewrite Pages URLs, allowing users to access Pages using the namespace in the path instead of the host. This modification will enable GitLab Pages to work without requiring a DNS wildcard. More context: https://gitlab.com/gitlab-org/gitlab/-/issues/211677#note_1646965167 Changelog: added
-
- Nov 29, 2023
-
-
Balasankar 'Balu' C authored
Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6275 Changelog: added Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Oct 23, 2023
-
-
Vladimir Shushlin authored
Changelog: added
-
- Oct 16, 2023
-
-
Robert Marshall authored
- Compile the SELinux policy module files from the base type enforcement files during the package build - The SELinux policy applies to more than RHEL 7, so move the type enforcement files out of the specific path for clarity Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8231 Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
- Oct 14, 2023
-
-
Balasankar 'Balu' C authored
Allow workhorse to be configured with different passwords for the redis and sentinels services. Related https://gitlab.com/gitlab-org/gitlab/-/issues/422820 Changelog: fixed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Sep 15, 2023
-
-
Balasankar "Balu" C authored
Changelog: added Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Aug 01, 2023
-
-
Sylvester Chin authored
Changelog: added
-
- Jun 16, 2023
-
-
Balasankar 'Balu' C authored
Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7808 Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Jun 14, 2023
-
-
Balasankar 'Balu' C authored
Support password authentication for Redis Sentinel See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6921 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Hossein Pursultani <hpursultani@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Reviewed-by:
Hossein Pursultani <hpursultani@gitlab.com> Co-authored-by:
Stan Hu <stanhu@gmail.com>
-
Stan Hu authored
This commit adds a separate password parameter for each Sentinel group and enables GitLab Rails, Workhorse, and `gitlab-kas` to use a password specified in `requirepass` in the Sentinel configuration: ```ruby gitlab_rails['redis_sentinels_password'] gitlab_rails['redis_cache_sentinels_password'] gitlab_rails['redis_queues_sentinels_password'] gitlab_rails['redis_shared_state_sentinels_password'] gitlab_rails['redis_trace_chunks_sentinels_password'] gitlab_rails['redis_actioncable_sentinels_password'] gitlab_rails['redis_rate_limiting_sentinels_password'] gitlab_rails['redis_sessions_sentinels_password'] gitlab_rails['redis_cluster_rate_limiting_sentinels_password'] gitlab_rails['redis_repository_cache_sentinels_password'] ``` We could avoid these extra configuration parameters by having the admin specify a `password` parameter for each host/port combination in `redis_sentinels`, `redis_cache_sentinels`, etc. However, this would add much duplication in the configuration and different passwords aren't actually supported by Redis Sentinel. gitlab-kas also expects a single Sentinel password stored in the `sentinel_password_file` configuration parameter. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/235938 Changelog: added
-
- Jun 12, 2023
-
-
Robert Marshall authored
Add rails settings for JH See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6920 Merged-by:
Robert Marshall <rmarshall@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Approved-by:
Kevin Morrison <kmorrison@gitlab.com> Approved-by:
Robert Marshall <rmarshall@gitlab.com> Reviewed-by:
Clemens Beck <cbeck@gitlab.com> Co-authored-by:
vincent_stchu <wbshu@jihulab.com> Co-authored-by:
Clemens Beck <cbeck@gitlab.com>
-
vincent stchu authored
Allows JH to set custom rails settings in gitlab.yml
-
- May 26, 2023
-
-
Stan Hu authored
In https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6921, we're adding support for configuring a password to authenticate with Redis Sentinel. This commit adds support for the `requirepass` config option so that the Omnibus-provided Sentinel can require a password. If `sentinel['password']` is set, the Sentinel instance passwords default to this password to make it easy to enable this option. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/235938 Changelog: added
-
- May 31, 2023
-
-
Stan Hu authored
This commit adds support for `puma['ssl_key_password_command']` to make it possible to store encrypted SSL keys on disk. This requires Puma v6.3.0 (https://github.com/puma/puma/pull/3133) to work: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/122200. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7799 Changelog: added
-