- Nov 15, 2024
-
-
Andrew Patterson authored
Change login shell for mattermost account to nologin to stop CIS from triggering rule 6.2.8 "Ensure users' home directories permissions are 750 or more restrictive".
-
- Oct 18, 2024
-
-
Clemens Beck authored
Deprecations for 17.9: * openSUSE Leap 15.5: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8778 Deprecations for 17.8: * Oracle Linux 7: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8746 * PiOS Buster: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8734 * Scientific Linux: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8745 * CentOS 7: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8714
-
- Nov 05, 2024
-
-
Stan Hu authored
Suppose you have this config: ``` gitlab_rails['redis_sentinels'] = [ {"host"=>"gitlabtest-cluster-redis-01", "port"=>26379}, {"host"=>"gitlabtest-cluster-redis-02", "port"=>26379}, {"host"=>"gitlabtest-cluster-redis-03", "port"=>26379} ] gitlab_rails['redis_sentinels_password'] = "some password" redis['enable'] = false redis['master_name'] = "gitlab-redis" redis['master_password'] = "some password" ``` Previously ActionCable Redis settings would only look for `gitlab_rails['redis_actioncable_sentinels_password']` and did not fall back to `gitlab_rails['redis_sentinels_password']`. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8728 Changelog: fixed
-
- Oct 22, 2024
-
-
Balasankar 'Balu' C authored
Changelog: added Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Sep 20, 2024
-
-
Vasilii Iakliushin authored
New configuration options were added to gitlab-shell: https://gitlab.com/gitlab-org/gitlab-shell/-/merge_requests/1141. Adds an option to configure them in Omnibus. Related https://gitlab.com/gitlab-org/gitlab/-/issues/460290 Changelog: added
-
- Sep 19, 2024
-
-
Balasankar 'Balu' C authored
Remove 'ci_jwt_signing_key' secret migrated to ApplicationSetting See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7930 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Rémy Coutable <remy@rymai.me>
-
- Sep 11, 2024
-
-
Rémy Coutable authored
Changelog: removed Signed-off-by:
Rémy Coutable <remy@rymai.me>
-
- Sep 18, 2024
-
-
Balasankar 'Balu' C authored
- Process roles that require GitLab Rails first. - Do not automatically run GitLab Rails for all roles at installation or reconfigure. - Ensure Patroni and Postgres roles can still perform the required database creation tasks. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8692 Changelog: changed Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
Garrod Alwood authored
Changelog: changed
-
- Sep 17, 2024
-
-
Balasankar 'Balu' C authored
Rather than re-use the attribute from GitLab Shell, Gitaly stores the token it uses to authenticate with GitLab under a unique attribute. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8688 Changelog: changed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Sep 04, 2024
-
-
Ben Bodenmiller authored
Changelog: changed
-
- Aug 26, 2024
-
-
Clemens Beck authored
The postgres_exporter['per_table_stats'] was deprecated in 16.4 and removed in 17.1. With an upgrade stop at 17.3, the deprecation message can now be can be removed. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8170
-
- Aug 23, 2024
-
-
Balasankar 'Balu' C authored
- Adds CentOS 7 deprecation warning. Changelog: deprecated Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Aug 21, 2024
-
-
Yu Shao Pang (SQPC) authored
Changelog: added
-
- Aug 19, 2024
-
-
Andrew Patterson authored
Debian 10 (Buster) has gone EOL, so add it to the deprecated OS list. Changelog: deprecated
-
- Aug 14, 2024
-
-
Ash McKenzie authored
Changelog: deprecated
-
- Aug 13, 2024
-
-
Balasankar 'Balu' C authored
Remove deprecation message for sidekiq queue_selector and negate Closes #8495 See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7825 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Lucas Li <lli@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Gregorius Marco <gmarco@gitlab.com>
-
- Aug 01, 2024
-
-
Gregorius Marco authored
-
Gregorius Marco authored
Resolves https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8491
-
- Aug 06, 2024
-
-
Naman Jagdish Gala authored
- Allow administrators to set a list of CIDR addresses that can bypass the rate limit. Related: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8649 Changelog: added
-
- Jul 15, 2024
-
-
Ian Baum authored
Add cronjob to sync finished pipelines to ClickHouse See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7783 Merged-by:
Ian Baum <ibaum@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Approved-by:
Ian Baum <ibaum@gitlab.com> Reviewed-by:
Ian Baum <ibaum@gitlab.com> Co-authored-by:
Pedro Pombeiro <noreply@pedro.pombei.ro>
-
- Jul 11, 2024
-
-
Pedro Pombeiro authored
-
- Jul 15, 2024
-
-
Clemens Beck authored
Remove the Grafana deprecation message which was accidentally re-added in https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7550. Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8601 Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8200
-
- Jul 12, 2024
-
-
Robert Marshall authored
Add support for configuring Redis client timeouts See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7749 Merged-by:
Robert Marshall <rmarshall@gitlab.com> Approved-by:
Alec Xu <axu@gitlab.com> Approved-by:
Robert Marshall <rmarshall@gitlab.com> Reviewed-by:
Robert Marshall <rmarshall@gitlab.com> Co-authored-by:
Stan Hu <stanhu@gmail.com>
-
- Jun 30, 2024
-
-
Stan Hu authored
For some installations, the default 1-second Redis connect timeout may not be sufficient. Just as PostgreSQL has the ability to configure the connection timeout, add the same for Redis. Include read and write timeout options for completness. Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/466271 Changelog: added
-
- Apr 15, 2024
-
-
Balasankar 'Balu' C authored
All the usecases of old RedisHelper has been migrated to NewRedisHelper. Drop the old RedisHelper and rename NewRedisHelper to replace it. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Jul 12, 2024
-
-
Ash McKenzie authored
Adds configuration support for Pure-SSH LFS protocol via the `gitlab_shell['lfs_pure_ssh_protocol']` option. Closes https://gitlab.com/gitlab-org/gitlab-shell/-/issues/773 Changelog: added
-
- Jul 10, 2024
-
-
Naman Jagdish Gala authored
- Migrates domain redirect and resolution logic for Pages into the Pages binary from the nginx configuration file template. Related: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8581+ Changelog: added
-
- Apr 08, 2024
-
-
Balasankar 'Balu' C authored
Drop the uses of old RedisHelper class to move everything to the NewRedisHelper logic Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
Balasankar 'Balu' C authored
Certain methods in the Redis Helper are to be used in libraries also, where the node object is unavailable. In those scenarios, the methods have to work with the Gitlab object. Make those methods class methods that take a config hash as argument. Also create instance methods with same name, which call these class methods and pass the node object as argument. Signed-off-by:
Balasankar 'Balu' C <balasankar@gitlab.com>
-
- Jun 26, 2024
-
-
Stan Hu authored
We had two different customers upgrade GitLab and run into `stderr: Error: Connection reset by peer` when attempting to determine the Redis version. This appears to have occurred because `gitlab-ctl reconfigure` can restart Redis right before it checks the version. This causes the `gitlab-ctl reconfigure` to fail outright. To avoid this failure mode, set the Chef `retries` parameter to 2. By default the `retry_delay` is 2 seconds. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8597 Changelog: fixed
-
- Jun 27, 2024
-
-
Stan Hu authored
Previously including reserved characters such as `@` in the Redis password would fail because `URI::Generic::DEFAULT_PARSER.escape` did not consider `@` unsafe, which it generally isn't per RFC 2396 and 3986. However, the `@` is not allowed in the userinfo field, and the URI builder for Ruby fails if using a reserved character were included. To fix this, use `ERB.url_encode`, which always escapes any non-alphanumeric string. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8602 Changelog: fixed
-
- Jun 04, 2024
-
-
Will Chandler authored
57396c7ab (Prevent Gitaly storages from using the same path, 2024-05-09) added a check to validate that only one storage is associated with a given filesystem path. We have received a customer report[0] that the error message used is confusing. Update the message to make it clear what the problem is. [0] https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8565
-
- Jun 24, 2024
-
-
Balasankar 'Balu' C authored
Disable request buffering for new SSH endpoints See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7713 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Vasilii Iakliushin <viakliushin@gitlab.com>
-
- Jun 12, 2024
-
-
Vasilii Iakliushin authored
Contributes to https://gitlab.com/gitlab-org/gitlab/-/issues/466160 **Problem** While testing the new implementation of SSH endpoints for git related actions. I noticed a problem reproducible in my local environment. The request from GitLab-Shell to Workhorse was hanging. After in investigation I discovered the root cause of this problem. In our NGINX configuration we use request buffering. After adding the new endpoint to the list of exceptions, then problem was resolved. **Solution** Add new endpoints to the list of exceptions for nginx configuration. Changelog: changed
-
- Jun 24, 2024
-
-
Ian Baum authored
* Creates the gitlab-backup user and groups if they dont' exist * Adds the user to other groups * For use by gitlab-backup-cli for read/write permission to data for backups and restores Changelog: added
-
- Jun 19, 2024
-
-
Balasankar 'Balu' C authored
Add public_key_algorithms option for gitlab-sshd Closes #8482 See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7660 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Reviewed-by:
Roger Meier <r.meier@siemens.com> Reviewed-by:
Clemens Beck <cbeck@gitlab.com> Co-authored-by:
Roger Meier <r.meier@siemens.com>
-
Roger Meier authored
This MR adds the option to explicitly set the public key algorithms as introduced via https://gitlab.com/gitlab-org/gitlab-shell/-/merge_requests/986 Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8482 Changelog: added
-
- Jun 13, 2024
-
-
Roger Meier authored
Issue: https://gitlab.com/gitlab-org/gitlab/-/issues/444193 MR: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/153877 Changelog: added
-
Clemens Beck authored
* Update consul version shipping with Omnibus. * Update supported BYO consul version. * Fix minor bug in BYO consul helper script. Changelog: changed
-