Skip to content

Modify root password for the ssh tunnel

George Koltsov requested to merge qa-tunnel-prep into master

This is part of the work for the Ensure security mechanisms for specs that use the ssh tunnel issue. This MR enables modifying an instance's root password via /etc/gitlab/gitlab.rb

The reason for this is to enforce additional security to internet-exposed instances.

This is a new scenario that is part of refactoring the existing Kubernetes scenario. The tests that need an ssh tunnel now are not necessarily related to Kubernetes (and the connectivity to GKE), and the name is overarching to testing the Container Registry, Auto DevOps, Monitoring Clusters with Prometheus, and other features that depend on Internet routing. It is important to keep the existing Kubernetes scenario while testing and migrating.

  • disable signups
  • change the root password to a secure tunnel password ( 👈 you are here)
Edited by George Koltsov

Merge request reports