Makes it possible to configure Praefect's reconciliation through
gitlab.rb.

In https://gitlab.com/gitlab-org/gitlab/-/merge_requests/42267, we are
disabling the Sidekiq Exporter logs by default since they are noisy and
don't add a lot of value.  This change allows admins to enable them if
needed.

Background in https://gitlab.com/gitlab-org/gitlab/-/issues/238556

this patch makes following changes:

1. Location block does not match a URL query string which results the
   .git/info/refs being never matched. To match the config of gitlab.com,
    we simply remove the pattern here.

2. Disable buffering for artifacts.

3. Escape the backslashes to make sure "." (dot) symbols is matched
   correctly during nginx location regex matching.

Without this there will be:

> There was an error running gitlab-ctl reconfigure:
> 
> /etc/gitlab/gitlab.rb:1639: syntax error, unexpected tSTRING_BEG, expecting '}'
>    'storage.path' => '/var/opt/gi...
>    ^
> /etc/gitlab/gitlab.rb:1639: syntax error, unexpected =>, expecting end-of-input
>    'storage.path' => '/var/opt/gitlab/alertmanage...
>                   ^~

This commit adds settings for the `storage_options` setting used to
configure AWS server side encryption. Note that only SSE-KMS
(https://docs.aws.amazon.com/kms/latest/developerguide/services-s3.html#sse)
is supported; SSE-C is not.

Related merge requests:

1. https://gitlab.com/gitlab-org/gitlab/-/merge_requests/38240
2. https://gitlab.com/gitlab-org/gitlab-workhorse/-/merge_requests/537

Katrin Leinweber authored 4 years ago and Balasankar C committed 4 years ago

Instead of the plaintext version of this file.
This reverts 4b28887b.

'read_only_after_failover' configuration toggle has been removed from
Praefect. This commit removes the configuration toggle from Praefect's
configuration template.

Cron job introduced in
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/38086

This reverts merge request !4289

This adds support for the gitlab.yml changes in
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/34460. This allows
GitLab to use the Workhorse S3 client with a single credential, enabling
proper MD5 checksums and multipart uploads, and paves the way for
user-specified keys for encrypted buckets.

These changes require
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/35480 to work.

This was missed by !4296. Added and updated for SSL_CERT_DIR.

Robert Marshall authored 4 years ago and Balasankar C committed 4 years ago

- Adds postgresql['hostssl']; defaults to `false`. If set to `true`,
  then `host` type connections will be set as `hostssl` for
  `trust_auth_cidr_addresses` and `md5_auth_cidr_addresses` entries.

Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

Praefect now supports TLS connections.
Secured listener can be configured by providing
'tls_listen_addr' configuration in combination
with 'tls' section that includes 'certificate_path'
and 'key_path'.
It is an optional configuration and it is not used
by default.

Closes: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/5446

Hossein Pursultani authored 4 years ago and DJ Mountney committed 4 years ago

This also includes Psycopg2 which is required by both patroni service
and patronictl commands.

Jason Young authored 4 years ago and Achilleas Pipinellis committed 4 years ago

While the workhorse source version still defaults to text - the Omnibus default for gitlab-workhorse changed to json as part of 12.0 - see https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/3292

With fallback behavior.

Borrowed from https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/4289, thanks to @JonathonReinhart

Now Praefect has the ability to disable mutation on repositories when
these are out of date and failover happens, data loss should not happen
anymore.

As such, this will now be the default, after: https://gitlab.com/gitlab-org/gitaly/-/merge_requests/2218

This change updates the omnibus defaults to reflect this, but is not
blocked on the upstream merge request.

Robert Marshall authored 4 years ago and Balasankar C committed 4 years ago

- The `gitlab.rb` template should show puma as the new default

Closes https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/5381



Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

Configuration 'postgres_queue_enabled' for praefect service
is not needed anymore as it is made enabled by default.

Closes: https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/5367

Allows enabling Praefect's read-only mode after a failover through
gitlab.rb.