- Oct 16, 2023
-
-
Robert Marshall authored
- Compile the SELinux policy module files from the base type enforcement files during the package build - The SELinux policy applies to more than RHEL 7, so move the type enforcement files out of the specific path for clarity Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8231 Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
- Oct 14, 2023
-
-
Balasankar 'Balu' C authored
Allow workhorse to be configured with different passwords for the redis and sentinels services. Related https://gitlab.com/gitlab-org/gitlab/-/issues/422820 Changelog: fixed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Oct 13, 2023
-
-
Balasankar 'Balu' C authored
- Dynamically locates the correct index for the paused database field in output to avoid problems where upstream changes to the output would then cause the high available failover mechanisms to fail when the primary database node goes down. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8166 Changelog: fixed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Oct 12, 2023
-
-
Robert Marshall authored
Enable GitLab to connect with Redis over TLS Closes #6628 and #8217 See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7151 Merged-by:
Robert Marshall <rmarshall@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Approved-by:
Robert Marshall <rmarshall@gitlab.com> Reviewed-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Reviewed-by:
Robert Marshall <rmarshall@gitlab.com> Reviewed-by:
Clemens Beck <cbeck@gitlab.com> Co-authored-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Sep 26, 2023
-
-
Balasankar "Balu" C authored
Changelog: fixed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Sep 19, 2023
-
-
Balasankar "Balu" C authored
Changelog: fixed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Sep 15, 2023
-
-
Balasankar "Balu" C authored
Changelog: added Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
Balasankar "Balu" C authored
Changelog: fixed Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-
- Oct 11, 2023
-
-
Pedro Pombeiro authored
Changelog: added
-
- Oct 03, 2023
-
-
Stan Hu authored
When `gitlab-ctl reconfigure` hits an HTTP error while trying to download local cookbooks, the application runs into an `uninitialized constant GitLabHandler::Exception::OmnibusHelper` error: ``` ERROR: Running exception handlers ERROR: Report handler GitLabHandler::Exception raised #<NameError: uninitialized constant GitLabHandler::Exception::OmnibusHelper> ERROR: /opt/gitlab/embedded/cookbooks/package/libraries/handlers/gitlab.rb:30:in `report' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/handler.rb:296:in `run_report_unsafe' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/handler.rb:284:in `run_report_safely' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/handler.rb:155:in `block in run_exception_handlers' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/handler.rb:153:in `each' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/handler.rb:153:in `run_exception_handlers' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/handler.rb:164:in `block in <class:Handler>' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/client.rb:443:in `block in run_failed' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/client.rb:442:in `each' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/client.rb:442:in `run_failed' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/client.rb:306:in `rescue in run' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/client.rb:299:in `run' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/application.rb:305:in `run_with_graceful_exit_option' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/application.rb:281:in `block in run_chef_client' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/local_mode.rb:42:in `with_server_connectivity' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/application.rb:264:in `run_chef_client' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/application/base.rb:352:in `run_application' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.0/lib/chef/application.rb:67:in `run' ERROR: /opt/gitlab/embedded/lib/ruby/gems/3.0.0/gems/chef-bin-17.10.0/bin/cinc-client:25:in `<top (required)>' ERROR: /opt/gitlab/embedded/bin/cinc-client:25:in `load' ERROR: /opt/gitlab/embedded/bin/cinc-client:25:in `<main>' ERROR: Exception handlers complete ``` This was seen in https://gitlab.com/gitlab-com/gl-infra/production/-/issues/16897 and raised as a side issue in https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8245. Changelog: fixed
-
Stan Hu authored
This is a follow-up to https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7137 to address https://gitlab.com/gitlab-org/gitlab/-/issues/420811. Currently Puma and Sidekiq boot with the warnings: ``` warning: One-line pattern matching is experimental, and the behavior may change in future versions of Ruby! ``` This occurs because the Remote Development codebase uses Ruby's experimental pattern matching syntax (https://docs.ruby-lang.org/en/3.0/syntax/pattern_matching_rdoc.html). Let's just squelch these warnings for now since they're development warnings. Changelog: fixed
-
- Sep 25, 2023
-
-
Stan Hu authored
Because of https://github.com/puma/puma/pull/3094, Puma v6.4.0 now returns the status code sent from the low-level handler instead of Puma's recommended status code. Previously we hard-coded low-level errors to return a 500 error, but now we should adapt this to return the status code recommended by Puma. Relates to https://gitlab.com/gitlab-com/gl-infra/production/-/issues/16417 Changelog: fixed
-
- Oct 04, 2023
-
-
Douglas Barbosa Alexandre authored
Changelog: added
-
- Sep 29, 2023
-
-
Andrew Patterson authored
if it has been stopped with the gitlab-ctl stop command. Changelog: fixed
-
Balasankar 'Balu' C authored
KAS: mention new env vars for private API See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7159 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Jason Plum <jplum@gitlab.com> Approved-by:
Achilleas Pipinellis <axil@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Reviewed-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Mikhail Mazurskiy <mmazurskiy@gitlab.com>
-
Mikhail Mazurskiy authored
-
- Sep 25, 2023
-
-
Chris Stone authored
-
- Sep 29, 2023
-
-
Balasankar 'Balu' C authored
Show correct default for ci_secure_files_enabled See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7162 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Co-authored-by:
Ben Bodenmiller <bbodenmiller@gmail.com>
-
- Sep 25, 2023
-
-
Ben Bodenmiller authored
-
GitLab Release Tools Bot authored
Consul RCE vulnerability `enable-script-checks` See merge request https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/368 Merged-by:
GitLab Release Tools Bot <delivery-team+release-tools@gitlab.com> Approved-by:
DJ Mountney <dj@gitlab.com> Approved-by:
Kevin Morrison <kmorrison@gitlab.com> Co-authored-by:
Clemens Beck <cbeck@gitlab.com>
-
Clemens Beck authored
Merge branch 'security-consul-rce' into 'master' See merge request gitlab-org/security/omnibus-gitlab!368 Changelog: security
-
- Sep 18, 2023
-
-
DJ Mountney authored
We will stop building packages for openSUSE 15.4 by GitLab 16.8 Changelog: deprecated
-
- Aug 10, 2023
-
-
Stan Hu authored
If the unencrypted Sentinel port is disabled and only TLS enabled, `gitlab-ctl reconfigure` previously failed because it attempted to talk to port 0, which is an invalid port. This commit fixes this problem by switching to TLS if is the only option. In addition, server and client certificates need to be provided to `redis-cli` if required. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6627 Changelog: fixed
-
- Sep 12, 2023
-
-
Sylvester Chin authored
This sets up the exporter metrics labels for the upcoming namespace deprecation in the next release. Changelog: other
-
- Sep 15, 2023
-
-
Clemens Beck authored
GitLab 16.3 is a required upgrade stop for 16.4. See: https://docs.gitlab.com/ee/update/#upgrade-paths Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8103 Changelog: changed
-
- Sep 14, 2023
-
-
Robert Marshall authored
Remove redundant postgres exporter custom queries Closes #8112 and #8164 See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7092 Merged-by:
Robert Marshall <rmarshall@gitlab.com> Approved-by:
João Alexandre Cunha <j.a.cunha@gmail.com> Approved-by:
Robert Marshall <rmarshall@gitlab.com> Reviewed-by:
Robert Marshall <rmarshall@gitlab.com> Co-authored-by:
Clemens Beck <cbeck@gitlab.com>
-
Clemens Beck authored
Postgres-exporter 13.0 moved queries from the default queries.yaml to collectors. The newly implemented collectors conflict with the custom queries.yaml from Omnibus, causing errors like: ``` An error has occurred while serving metrics: collected metric pg_replication_is_replica gauge:{value:0} has help "Indicates if the server is a replica" but should have "Indicates if this host is a slave" ``` Upstream MR: https://github.com/prometheus-community/postgres_exporter/pull/801 Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8164 Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8112 Changelog: fixed
-
- Sep 06, 2023
-
-
Stan Hu authored
Puma 6 dropped support for nakayoshi_fork (https://github.com/puma/puma/issues/2258). GitLab has been running Puma 6 since GitLab 16.1 (https://gitlab.com/gitlab-org/gitlab/-/merge_requests/119135). Changelog: changed
-
- Sep 08, 2023
-
-
Balasankar 'Balu' C authored
Provide option to configure a separate workhorse redis See merge request https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7071 Merged-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Approved-by:
Clemens Beck <cbeck@gitlab.com> Reviewed-by:
Balasankar 'Balu' C <balasankar@gitlab.com> Co-authored-by:
Sylvester Chin <schin@gitlab.com>
-
- Aug 01, 2023
-
-
Sylvester Chin authored
Changelog: added
-
- Sep 05, 2023
-
-
Grant Young authored
No longer required after Grafana removal Changelog: removed
-
- Sep 06, 2023
-
-
Dustin Collins authored
- Delete Grafana invocation from monitoring recipe Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8123 Changelog: removed
-
Suleimi Ahmed authored
- Allow administrators to configure unique connection info for a container registry metadata database Related https://gitlab.com/gitlab-org/container-registry/-/issues/1071 Changelog: added
-
- Aug 09, 2023
-
-
Robert Marshall authored
- We no longer need to notify users about gitlab_default_can_create_group as it has been removed for minimally three milestones in 16.x series. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/7769 Signed-off-by:
Robert Marshall <rmarshall@gitlab.com>
-
- Aug 04, 2023
-
-
Sylvester Chin authored
Changelog: other
-
- Aug 09, 2023
-
-
Mikhail Mazurskiy authored
Push notifications reduce the need to poll this often. Change is also reflected in application defaults. Related https://gitlab.com/gitlab-org/cluster-integration/gitlab-agent/-/merge_requests/1046 Changelog: changed
-
- Aug 04, 2023
-
-
Hossein Pursultani authored
This is a fix on top of that disables Grafana runit service after it is removed. Related to: https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7069 Changelog: fixed
-
- Jul 31, 2023
-
-
Stan Hu authored
https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/7006 added `proxy_http_version 1.1` to all NGINX endpoints to fix an issue with GitLab Pages and chunked files. However, this causes HTTP requests to require a Host header. Since the monitoring endpoints just handle simple GET requests, we don't need to handle chunked files and can loosen the HTTP version requirement. Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8099 Changelog: fixed
-
- Aug 01, 2023
-
-
Hossein Pursultani authored
Software configuration and related code and documentation are removed from the package. Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8092 Changelog: removed
-
- Jul 29, 2023
-
-
Balasankar 'Balu' C authored
Signed-off-by:
Balasankar "Balu" C <balasankar@gitlab.com>
-