- Jun 16, 2023
-
-
Balasankar 'Balu' C authored
Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7808 Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Jun 15, 2023
-
-
Balasankar 'Balu' C authored
- Adds option: package['generate_default_secrets'] = true - Adds option: package['generate_secrets_json_file'] = true - The options control whether or not secrets are generated and written to `JSON` by Omnibus during installation and reconfigure. - Feature is not yet intended for usage in a self-managed instance Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7700 Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Jun 14, 2023
-
-
Stan Hu authored
This commit adds a separate password parameter for each Sentinel group and enables GitLab Rails, Workhorse, and `gitlab-kas` to use a password specified in `requirepass` in the Sentinel configuration: ```ruby gitlab_rails['redis_sentinels_password'] gitlab_rails['redis_cache_sentinels_password'] gitlab_rails['redis_queues_sentinels_password'] gitlab_rails['redis_shared_state_sentinels_password'] gitlab_rails['redis_trace_chunks_sentinels_password'] gitlab_rails['redis_actioncable_sentinels_password'] gitlab_rails['redis_rate_limiting_sentinels_password'] gitlab_rails['redis_sessions_sentinels_password'] gitlab_rails['redis_cluster_rate_limiting_sentinels_password'] gitlab_rails['redis_repository_cache_sentinels_password'] ``` We could avoid these extra configuration parameters by having the admin specify a `password` parameter for each host/port combination in `redis_sentinels`, `redis_cache_sentinels`, etc. However, this would add much duplication in the configuration and different passwords aren't actually supported by Redis Sentinel. gitlab-kas also expects a single Sentinel password stored in the `sentinel_password_file` configuration parameter. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/235938 Changelog: added
-
- Jun 13, 2023
-
-
Priyan Sureshbabu authored
Changelog: changed
-
- May 24, 2023
-
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Jun 12, 2023
-
-
Dustin Collins authored
Changelog: changed
-
- May 26, 2023
-
-
Stan Hu authored
In https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6921, we're adding support for configuring a password to authenticate with Redis Sentinel. This commit adds support for the `requirepass` config option so that the Omnibus-provided Sentinel can require a password. If `sentinel['password']` is set, the Sentinel instance passwords default to this password to make it easy to enable this option. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/235938 Changelog: added
-
- May 31, 2023
-
-
Stan Hu authored
This commit adds support for `puma['ssl_key_password_command']` to make it possible to store encrypted SSL keys on disk. This requires Puma v6.3.0 (https://github.com/puma/puma/pull/3133) to work: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/122200. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7799 Changelog: added
-
- May 17, 2023
-
-
João Alexandre Cunha authored
The old configuration structure was deprecated and expected to be removed in 16.0. User should refer to this link for the config migration: https://docs.gitlab.com/ee/update/#gitaly-omnibus-gitlab-configuration-structure-change Changelog: removed
-
- May 16, 2023
-
-
João Alexandre Cunha authored
The old configuration structure was deprecated and expected to be removed in 16.0. User should refer to this link for the config migration: https://docs.gitlab.com/ee/update/#praefect-omnibus-gitlab-configuration-structure-change Changelog: removed
-
- May 15, 2023
-
-
Balasankar 'Balu' C authored
Add SMTP timeout configuration options See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6874 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
João Alexandre Cunha <j.a.cunha@gmail.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Stan Hu <stanhu@gmail.com>
-
- May 09, 2023
-
-
Stan Hu authored
In https://github.com/mikel/mail/pull/1427/files, mail v2.8.1 gem modified the default open and read timeout values to 5 seconds instead of the default `Net::SMTP` 30 and 60 seconds, respectively. Since upgrading to GitLab 15.10.3, some users have observed receiving `Net::ReadTimeout` errors. This commit restores the original defaults and allows users to configure the timeouts. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/410336 Changelog: added
-
- May 12, 2023
-
-
Robert Marshall authored
- Enterprise Linux Stream releases use integer versions such as '8' or '9' rather than '8.x' or '9.x'. This updates the SELinux compatibility detection code to accept either type of version string. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6397 Changelog: fixed Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
- May 11, 2023
-
-
Robert Marshall authored
- Need to install the SELinux tools for EL 9 packages for the SELinux policies to be applied correctly. - Ensure EL 9 identifies as SELinux ready. Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6878 Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
- May 10, 2023
-
-
Dustin Collins authored
changelog: removed
-
- Mar 21, 2023
-
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- May 05, 2023
-
-
Stan Hu authored
GitLab versions 15.10.4 and up shipped with https://gitlab.com/gitlab-org/gitlab/-/merge_requests/116925 in order to fix a Ruby 3 upgrade issue that made it impossible to disable STARTTLS if the SMTP server advertised support for it. However, this change enforced the constraint that both SMTP TLS and STARTTLS cannot be enabled simultaneously. This follows the behavior of the net-smtp gem, which raises an exception if a user attempts to enable both. This constraint was added because as described in https://github.com/mikel/mail/pull/1536, the logic for enabling/disabling TLS and/or STARTTLS is a bit tricky to get right and missed some important edge cases. This commit adds a validation step that will throw an error if both settings appear: ```ruby gitlab_rails['smtp_tls'] = true gitlab_rails['smtp_enable_starttls_auto'] = true ``` Previously if SMTP TLS were enabled, STARTTLS was disabled outright. If `gitlab_rails['smtp_tls']` is enabled, generally the easiest way to get things working is to set `gitlab_rails['smtp_enable_starttls_auto']` to `false`. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/409835 Also see https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6858 Changelog: changed
-
- May 10, 2023
-
-
Hossein Pursultani authored
- Grafana no longer enabled by default on installation. - Installations of Grafana are turned off on upgrade as a breaking change. - Adds flags to allow force enablement of Grafana. - Adds banner stating Grafana will be removed by GitLab version 16.3. Changelog: deprecated
-
- May 09, 2023
-
-
Abdul Wadood authored
As part of bringing database decomposition support to self-managed we require self-managed to have two connections by default. Both these connections will point to the same database but can be configured to point to two different databases by overriding the defaults in `/etc/gitlab/gitlab.rb`. The users can switch back to a single connection by overriding the default by adding the following in `/etc/gitlab/gitlab.rb`: `gitlab_rails['databases']['ci']['enable'] = false` Changelog: changed
-
- May 08, 2023
-
-
Andrew Patterson authored
Changelog: other Signed-off-by:
Andrew Patterson <apatterson@gitlab.com>
-
Nikola Milojevic authored
Changelog: removed
-
- May 05, 2023
-
-
Toon Claes authored
Gitaly removed the gitaly-ruby configuration because it's no longer using Ruby. So we can remove code that composes this configuration. Issue: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7711 Changelog: deprecated
-
- May 04, 2023
-
-
Jason Young authored
Changelog: added Signed-off-by:
Jason Young <jyoung@gitlab.com>
-
- Apr 28, 2023
-
-
Balasankar 'Balu' C authored
Use underscored key names in all rails key configuration invocations. Removes un-used rails_app variable abstraction. Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6873 Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7455 Changelog: deprecated Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Apr 26, 2023
-
-
Dylan Griffith authored
This is going to be used as part of https://gitlab.com/gitlab-org/gitlab/-/issues/404396 . We need a database specifically for storing embeddings for AI related features. It will be configured similarly to the `ci` database. The equivalent CNG change can be found at https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/3107 . Related https://gitlab.com/gitlab-org/gitlab/-/issues/404396 Changelog: added
-
- Apr 20, 2023
-
-
Balasankar "Balu" C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Apr 05, 2023
-
-
DJ Mountney authored
- Only add boringcrypto where needed in omnibus
-
- Apr 18, 2023
-
-
Balasankar 'Balu' C authored
So that non-actionable deprecation notice about gitaly['storage'] is not shown to users. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7743 Changelog: fixed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
David Fernandez authored
When using a consolidated configuration in object storage and the google provider, we will set up workhorse so that its native google cloud storage client gets set up too. Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7324 Changelog: changed
-
- Apr 14, 2023
-
-
Balasankar 'Balu' C authored
Migrate node settings from hyphenated form to underscore form for all geo-postgresql service related keys. Changelog: deprecated Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Apr 07, 2023
-
-
Balasankar 'Balu' C authored
Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6873 Changelog: deprecated Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-