<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/gitlab/gitlab-ce.git/config/initializers/1_settings.rb, branch document-lambda-deploy</title>
<subtitle>gitlab.com: gitlab-org/gitlab-ce.git
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/'/>
<entry>
<title>Set default authorized_keys_file</title>
<updated>2019-08-29T08:33:04+00:00</updated>
<author>
<name>Patrick Bajao</name>
<email>ebajao@gitlab.com</email>
</author>
<published>2019-08-23T05:57:22+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=95ffd22f07d821f223388bd60a287365d3b7d8f6'/>
<id>95ffd22f07d821f223388bd60a287365d3b7d8f6</id>
<content type='text'>
This is the same as gitlab-shell's default. This is to ensure
that it's always set.

It needs to be the same as gitlab-shell's default because we
don't set a default value in omnibus-gitlab. If users don't
set the value of that config in their install and they upgraded,
we must ensure that it's still going to point to the same
authorized keys file.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is the same as gitlab-shell's default. This is to ensure
that it's always set.

It needs to be the same as gitlab-shell's default because we
don't set a default value in omnibus-gitlab. If users don't
set the value of that config in their install and they upgraded,
we must ensure that it's still going to point to the same
authorized keys file.
</pre>
</div>
</content>
</entry>
<entry>
<title>Update docs and comments about saml with allow_bypass_two_factor</title>
<updated>2019-08-27T03:46:32+00:00</updated>
<author>
<name>dodocat</name>
<email>jingqq5210@gmail.com</email>
</author>
<published>2019-08-27T03:46:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=6e2032f24e0428189f8c9fe9e296a9630277155e'/>
<id>6e2032f24e0428189f8c9fe9e296a9630277155e</id>
<content type='text'>
allow_bypass_two_factor configration dose not work with saml provider
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
allow_bypass_two_factor configration dose not work with saml provider
</pre>
</div>
</content>
</entry>
<entry>
<title>feat: SMIME signed notification emails</title>
<updated>2019-08-20T14:13:32+00:00</updated>
<author>
<name>Diego Louzán</name>
<email>diego.louzan.ext@siemens.com</email>
</author>
<published>2019-07-10T19:40:28+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=0dcb9d21efc1db97765d82ee39a0f0905ba945ba'/>
<id>0dcb9d21efc1db97765d82ee39a0f0905ba945ba</id>
<content type='text'>
- Add mail interceptor the signs outgoing email with SMIME
- Add lib and helpers to work with SMIME data
- New configuration params for setting up SMIME key and cert files
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- Add mail interceptor the signs outgoing email with SMIME
- Add lib and helpers to work with SMIME data
- New configuration params for setting up SMIME key and cert files
</pre>
</div>
</content>
</entry>
<entry>
<title>Add support for Content-Security-Policy</title>
<updated>2019-08-07T02:37:31+00:00</updated>
<author>
<name>Stan Hu</name>
<email>stanhu@gmail.com</email>
</author>
<published>2019-08-06T06:14:32+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=5fbbd3dd6e965f76ecf1767373bddd236a78a4be'/>
<id>5fbbd3dd6e965f76ecf1767373bddd236a78a4be</id>
<content type='text'>
A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
inline JavaScript to execute if the script nonce matches the header
value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
so provide configuration to enable this and make it work.

To support this, we need to change all `:javascript` HAML filters to the
following form:

```
= javascript_tag nonce: true do
  :plain
    ...
```

We use `%script` throughout our HAML to store JSON and other text, but
since this doesn't execute, browsers don't appear to block this content
from being used and require the nonce value to be present.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
inline JavaScript to execute if the script nonce matches the header
value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
so provide configuration to enable this and make it work.

To support this, we need to change all `:javascript` HAML filters to the
following form:

```
= javascript_tag nonce: true do
  :plain
    ...
```

We use `%script` throughout our HAML to store JSON and other text, but
since this doesn't execute, browsers don't appear to block this content
from being used and require the nonce value to be present.
</pre>
</div>
</content>
</entry>
<entry>
<title>Backport of https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/3809</title>
<updated>2019-08-01T17:38:07+00:00</updated>
<author>
<name>Valery Sizov</name>
<email>valery@gitlab.com</email>
</author>
<published>2019-08-01T12:03:08+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=f519a4b72f81a1e3c81e5e684d236bbe30e0dd2d'/>
<id>f519a4b72f81a1e3c81e5e684d236bbe30e0dd2d</id>
<content type='text'>
Introducing Docker Registry replication
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Introducing Docker Registry replication
</pre>
</div>
</content>
</entry>
<entry>
<title>Backport of https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/14597</title>
<updated>2019-07-24T14:56:48+00:00</updated>
<author>
<name>Valery Sizov</name>
<email>valery@gitlab.com</email>
</author>
<published>2019-07-09T15:59:52+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=1902d9cc74a1dc2c87fdbb39a6cdbb67092cbb5a'/>
<id>1902d9cc74a1dc2c87fdbb39a6cdbb67092cbb5a</id>
<content type='text'>
This is the first part of Docker Registry replication
    for secondary Geo node.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is the first part of Docker Registry replication
    for secondary Geo node.
</pre>
</div>
</content>
</entry>
<entry>
<title>Port EE specific settings to CE</title>
<updated>2019-07-22T20:30:59+00:00</updated>
<author>
<name>Lin Jen-Shin</name>
<email>godfat@godfat.org</email>
</author>
<published>2019-07-22T09:50:23+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=8214ce34c83df459767af79955cfb123575f8b65'/>
<id>8214ce34c83df459767af79955cfb123575f8b65</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Add a rubocop for Rails.logger</title>
<updated>2019-07-10T19:26:47+00:00</updated>
<author>
<name>Mayra Cabrera</name>
<email>mcabrera@gitlab.com</email>
</author>
<published>2019-07-10T19:26:47+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=0ab89d8e36ba58a95244b4c6dd49d53fac7a699f'/>
<id>0ab89d8e36ba58a95244b4c6dd49d53fac7a699f</id>
<content type='text'>
Suggests to use a JSON structured log instead

Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/54102
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Suggests to use a JSON structured log instead

Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/54102
</pre>
</div>
</content>
</entry>
<entry>
<title>CE-EE parity for files in config/initializers</title>
<updated>2019-07-08T20:04:38+00:00</updated>
<author>
<name>Robert Speicher</name>
<email>rspeicher@gmail.com</email>
</author>
<published>2019-07-08T19:47:16+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=3d12f07331f8031748bdd281993c490d3edfd6da'/>
<id>3d12f07331f8031748bdd281993c490d3edfd6da</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Includes logic to persist namespace statistics</title>
<updated>2019-07-02T14:44:39+00:00</updated>
<author>
<name>Mayra Cabrera</name>
<email>mcabrera@gitlab.com</email>
</author>
<published>2019-07-02T14:44:39+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/gitlab/gitlab-ce.git/commit/?id=dfdfa913ba9cb74beb7adad0352c5efadec84494'/>
<id>dfdfa913ba9cb74beb7adad0352c5efadec84494</id>
<content type='text'>
- Add two new ActiveRecord models:
  - RootNamespaceStoragestatistics will persist root namespace statistics
  - NamespaceAggregationSchedule will save information when a new update
to the namespace statistics needs to be scheduled
- Inject into UpdateProjectStatistics concern a new callback that will
call an async job to insert a new row onto NamespaceAggregationSchedule
table
- When a new row is inserted a new job is scheduled. This job will
update call an specific service to update the statistics and after that
it will delete thee aggregated scheduled row
- The RefresherServices makes heavy use of arel to build composable
queries to update Namespace::RootStorageStatistics attributes.
- Add an extra worker to traverse pending rows on
NAmespace::AggregationSchedule table and schedule a worker for each one
of this rows.
- Add an extra worker to traverse pending rows on
NAmespace::AggregationSchedule table and schedule a worker for each one
of this rows
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
- Add two new ActiveRecord models:
  - RootNamespaceStoragestatistics will persist root namespace statistics
  - NamespaceAggregationSchedule will save information when a new update
to the namespace statistics needs to be scheduled
- Inject into UpdateProjectStatistics concern a new callback that will
call an async job to insert a new row onto NamespaceAggregationSchedule
table
- When a new row is inserted a new job is scheduled. This job will
update call an specific service to update the statistics and after that
it will delete thee aggregated scheduled row
- The RefresherServices makes heavy use of arel to build composable
queries to update Namespace::RootStorageStatistics attributes.
- Add an extra worker to traverse pending rows on
NAmespace::AggregationSchedule table and schedule a worker for each one
of this rows.
- Add an extra worker to traverse pending rows on
NAmespace::AggregationSchedule table and schedule a worker for each one
of this rows
</pre>
</div>
</content>
</entry>
</feed>
