| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
| |
JSON logs include arguments by default, and they're easier to
parse/filter.
|
| |
|
|
|
|
|
| |
Basic `/internal/pages` endpoint that will be used for Pages virtual
domains internal API. The endpoint is currently behind feature flag and
provides authetication similar to how Workhorse is authenticating with
the GitLab.
|
| | |
|
| | |
|
| |
|
|
| |
allow_bypass_two_factor configration dose not work with saml provider
|
| |
|
|
| |
This enables CSP in dev and CI
|
| | |
|
| |
|
|
|
|
| |
- Add mail interceptor the signs outgoing email with SMIME
- Add lib and helpers to work with SMIME data
- New configuration params for setting up SMIME key and cert files
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
A nonce-based Content-Security-Policy thwarts XSS attacks by allowing
inline JavaScript to execute if the script nonce matches the header
value. Rails 5.2 supports nonce-based Content-Security-Policy headers,
so provide configuration to enable this and make it work.
To support this, we need to change all `:javascript` HAML filters to the
following form:
```
= javascript_tag nonce: true do
:plain
...
```
We use `%script` throughout our HAML to store JSON and other text, but
since this doesn't execute, browsers don't appear to block this content
from being used and require the nonce value to be present.
|
| |
|
|
| |
Introducing Docker Registry replication
|
| |
|
|
|
| |
This is the first part of Docker Registry replication
for secondary Geo node.
|
| |
|
|
| |
Instead return error objects.
|
| |
|
|
|
| |
This copies over EE-specific changes to shared configuration files in
CE.
|
| |
|
|
|
|
| |
https://community.atlassian.com/t5/Jira-questions/Is-it-quot-JIRA-quot-or-quot-Jira-quot/qaq-p/681163
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
|
| |
|
|
|
|
|
|
| |
To make this happen, we need to conditionally add the group_saml
strategy when running tests, but only on EE. This requires some changes
to Gitlab.ee? so that it can be used before/without loading the Rails
environment. We also have to change how we require a few files, so this
can run outside of Rails.
|
| |
|
|
|
| |
This sampler gathers Puma-specific metrics which can be used by
Prometheus then.
|
| |
|
|
|
|
| |
Add comment to clarify intended usage of `artifacts_server`.
Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/49475.
|
| |
|
|
|
|
| |
Remove puts
Remove puts
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
| |
Since external diffs are likely to be a bit slower than in-database
ones, add a mode that makes diffs external after they've been obsoleted
by events. This should strike a balance between performance and disk
space.
A background cron drives the majority of migrations, since diffs become
outdated through user actions.
|
| |
|
|
|
|
|
|
|
|
|
| |
In this commit, some methods that aren't being used
are removed from `Gitlab::Shell`. They are the ff:
- `#remove_keys_not_found_in_db`
- `#batch_read_key_ids`
- `#list_key_ids`
The corresponding methods in `Gitlab::Keys` have been
removed as well.
|
| | |
|
| |
|
|
|
|
|
| |
We've previously exposed ca_file and ssl_version but there are many
possible options that can be used inside tls_options. Instead of
exposing individual ones, simply expose the entire hash so it can
be passed in and we won't have to add things in the future.
|
| | |
|
| | |
|
| | |
|
| |\ |
|
| | |
| |
| |
| | |
Signed-off-by: Rémy Coutable <remy@rymai.me>
|
| | |
| |
| |
| |
| |
| |
| |
| | |
Adds gitlab.impersonation_enabled config option defaulting to true to
keep the current default behaviour.
Only the act of impersonation is modified, impersonation token
management is not affected.
|
| |\ \
| |/ |
|
| | |\
| | |
| | |
| | |
| | | |
Add packages section to CE config file
See merge request gitlab-org/gitlab-ce!22151
|
| | | |
| | |
| | |
| | | |
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
|
| | | | |
|
| |/ / |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Broken storage used to be used to test situations where the Git storage
wasn't being reached. These days we can just mock the Gitaly response.
But given the broken storage is removed now, Gitaly can take over
control of the storage being reachable. If it's not, Gitaly won't boot.
That's nice for situations where a disk wasn't mounted for instance.
Gitaly MR: https://gitlab.com/gitlab-org/gitaly/merge_requests/675
|
| |/ |
|
| | |
|
| | |
|
| |
|
|
|
|
| |
* (Suf)fix #51085 :-)
Signed-off-by: Samuele Kaplun <kaplun@protonmail.com>
|
| | |
|
| | |
|
| |\
| |
| |
| |
| | |
Add options to adjust signed url creation for Object Storage to use older signature if needed.
See merge request gitlab-org/gitlab-ce!18719
|
| | | |
|
| | | |
|
| | |
| |
| |
| | |
not support V4 of the signature.
|
| | | |
|
| |/ |
|
| |\
| |
| |
| |
| | |
Ports omniauth-jwt gem onto GitLab OmniAuth Strategies suite
See merge request gitlab-org/gitlab-ce!18580
|
