delta/gitlab/gitlab-shell.git/internal, branch main

Configure a default ttl for personal access tokens

2023-05-11T20:38:36+00:00

Prior to this change personal access tokens without a ttl would never
expire. In Gitlab 15.4 we deprecated non-expiring tokens and are
scheduled for removal in 16.0.

https://gitlab.com/gitlab-org/gitlab/-/issues/369122

This change alters the gitlab-shell command for creating tokens to
ensure add a default limit of 30 days.

Closes https://gitlab.com/gitlab-org/gitlab-shell/-/issues/640

Update golang-crypto fork version

2023-05-04T13:17:59+00:00

It updates golang-crypto version and fixes the test that verifies
the order of the supported algorithms

Acceptance test for Geo push

2023-03-17T20:35:15+00:00

It imitates a push to the secondary and verifies that the push
is redirected to the primary

Configure Gitaly storage acceptance tests

2023-03-15T13:53:05+00:00

Perform HTTP request to primary on Geo push

2023-03-03T06:18:39+00:00

Currently, we perform a request to Gitlab Rails that proxies
the request to primary

However, it causes timeouts on big pushes and consumes large
amount of memory. We can perform an HTTP request directly
from Gitlab Shell instead and stream the response to the user

sshd: exclude gssapi when building without cgo

2023-02-23T19:37:05+00:00

MR #682 broke building without cgo enabled as it introduced a dependency
on a Kerberos library. This can only be disabled at runtime and thus
static builds of gitlab-sshd are no longer possible.

This change introduces an alternative implementation of the GSSAPI
structure which just rejects attempts to use it.
That alternative implementation gets automatically activated in case the
user is building without cgo.

Add DNS discovery support for Gitaly/Praefect

2023-02-14T09:16:13+00:00

All the implementations of DNS discovery were done in this epic:
https://gitlab.com/groups/gitlab-org/-/epics/8971. Gitaly allows clients
to configure DNS discovery via dial option. This MR adds the exposed
dial options to client connection creation in Gitlab-shell.

Issue: https://gitlab.com/gitlab-org/gitaly/-/issues/4722
Changelog: added

feat: make retryable http default client

2023-01-30T08:54:42+00:00

What
---
Make the retryableHTTP client introduced in
https://gitlab.com/gitlab-org/gitlab-shell/-/merge_requests/703 the
default HTTP client.

Why
---
In
https://gitlab.com/gitlab-com/gl-infra/production/-/issues/7979#note_1254964426
we've seen a 99% error reduction on `git` commands from `gitlab-shell`
when the retryableHTTP client is used.

This has been running in production for over 2 weeks in `us-east1-b` and
5 days fleet-wide so we should be confident that this client works as
expected.

Reference: https://gitlab.com/gitlab-com/gl-infra/production/-/issues/7979
Signed-off-by: Steve Azzopardi

Merge branch '196-add-kerberos-support' into 'main'

2023-01-23T07:54:09+00:00

Add support for the gssapi-with-mic auth method

Closes #196

See merge request https://gitlab.com/gitlab-org/gitlab-shell/-/merge_requests/682

Merged-by: Igor Drozdov 
Approved-by: Alejandro Rodríguez 
Approved-by: Patrick Bajao 
Approved-by: Costel Maxim 
Approved-by: Igor Drozdov 
Reviewed-by: Alejandro Rodríguez 
Reviewed-by: Igor Drozdov 
Reviewed-by: Patrick Bajao 
Reviewed-by: Rohit Shambhuni 
Co-authored-by: Lee Tickett 
Co-authored-by: Marin Hannache

Add support for the gssapi-with-mic auth method

2023-01-23T07:54:09+00:00