omnibus-gitlab merge requestshttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests2020-07-09T14:39:00Zhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1882Enable pgbouncer application_name_add_host config by default2020-07-09T14:39:00ZStan HuEnable pgbouncer application_name_add_host config by defaultThis setting makes it easier to debug which application is connecting
to pgbouncer. We've had it enabled on GitLab.com for a while.
Closes #2415This setting makes it easier to debug which application is connecting
to pgbouncer. We've had it enabled on GitLab.com for a while.
Closes #241510.0Marin JankovskiMarin Jankovskihttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1977Fix link to upgrade docs in PG version check log2017-10-03T10:04:59ZBalasankar CFix link to upgrade docs in PG version check log[skip ci][skip ci]10.0Marin JankovskiMarin Jankovskihttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1886Resolve "Investigate including policycoreutils as a runtime dependency in ord...2017-09-29T22:40:15Zusername-removed-1506167Resolve "Investigate including policycoreutils as a runtime dependency in order to be able to use semanage"Closes #1485.
This change replaces `chcon` with `semanage` in the gitlab-shell recipe, which makes the fcontext change permanent and brings the setup more in line with current SELinux best practices. As a result, the security context sh...Closes #1485.
This change replaces `chcon` with `semanage` in the gitlab-shell recipe, which makes the fcontext change permanent and brings the setup more in line with current SELinux best practices. As a result, the security context shouldn't get messed up anymore.
The documentation and test descriptions have been updated to reflect the change.
This change requires `policycoreutils-python` as a runtime dependency. The sort of counterintuitively-named `restorecon -R -v` is necessary to apply the new ssh_home_t context.
The dependencies required are in the base repos for all supported RHEL flavors.10.0username-removed-1506167username-removed-1506167https://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1958Use specific tags for all our package and docker 'builds'2017-09-29T20:47:29ZDJ MountneyUse specific tags for all our package and docker 'builds'We still use any shared machine that will run untagged jobs for staging
upload and release.We still use any shared machine that will run untagged jobs for staging
upload and release.10.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1944Reduce the days that artifacts are stored for our builds from 14 to 72017-09-29T20:47:28ZDJ MountneyReduce the days that artifacts are stored for our builds from 14 to 7These artifacts are for periods longer than a day when performing a
release. The release task can happend days after the staging task.
14 days has been putting a little too much pressure on our current
storage for artifacs. We should be...These artifacts are for periods longer than a day when performing a
release. The release task can happend days after the staging task.
14 days has been putting a little too much pressure on our current
storage for artifacs. We should be able to reduce it to 7, still have a
comfortable window for releases, but require less storage.
Related to: https://gitlab.com/gitlab-com/infrastructure/issues/277710.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1941Update mattermost to 4.22017-09-27T11:30:21ZDJ MountneyUpdate mattermost to 4.2Includes step to add gitlab to the list of trusted internal connections when running on the same machineIncludes step to add gitlab to the list of trusted internal connections when running on the same machine10.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1966Update consul cookbook to reload service2017-09-27T10:45:35ZIan BaumUpdate consul cookbook to reload serviceRestarting the consul service can be dangerous.
Related to #2802Restarting the consul service can be dangerous.
Related to #280210.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1964Add option to configure redis snapshotting2017-09-27T08:54:26ZBalasankar CAdd option to configure redis snapshottingCloses #2754Closes #275410.0Marin JankovskiMarin Jankovskihttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1962Update to pg-upgrade output2017-09-27T08:53:10ZIan BaumUpdate to pg-upgrade outputChanging output based on the presence or absence of a version to upgrade
to
* Move test for a version to upgrade to earlier. Previously we were
checking if an instance had already been upgraded, before we confirmed
there was something to...Changing output based on the presence or absence of a version to upgrade
to
* Move test for a version to upgrade to earlier. Previously we were
checking if an instance had already been upgraded, before we confirmed
there was something to upgrade to.
* Change test to not use the progress_message method. This isn't an OK
Not OK test, it only controls workflow.
Closes #280010.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1585Hide the query string in NGINX access logs by default2017-09-26T21:32:02ZNick ThomasHide the query string in NGINX access logs by defaultRelated to https://gitlab.com/gitlab-com/infrastructure/issues/273 https://gitlab.com/gitlab-org/gitlab-workhorse/issues/71
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/19203Related to https://gitlab.com/gitlab-com/infrastructure/issues/273 https://gitlab.com/gitlab-org/gitlab-workhorse/issues/71
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/1920310.0Marin JankovskiMarin Jankovskihttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1865Parameter to increase timeout for db backup.2017-09-26T17:46:02ZJohn JarvisParameter to increase timeout for db backup.Adds a parameter to override the default timeout for
the postgresql backup for replicate_geo_db.
/cc @stanhuAdds a parameter to override the default timeout for
the postgresql backup for replicate_geo_db.
/cc @stanhu10.0Marin JankovskiMarin Jankovskihttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1963Keep default services enabled when enabling a GEO role2017-09-26T11:26:10ZDJ MountneyKeep default services enabled when enabling a GEO roleThis adds support for roles specifing whether they manage services or
not.
Roles that manage services cause the Default Role to be disabled when
they are in use.
Roles that do not manage services, like our current Geo roles, don't
caus...This adds support for roles specifing whether they manage services or
not.
Roles that manage services cause the Default Role to be disabled when
they are in use.
Roles that do not manage services, like our current Geo roles, don't
cause the Default Role to be disabled.
Roles default to 'managing_services'
Fixes: https://gitlab.com/gitlab-org/omnibus-gitlab/issues/281810.0Marin JankovskiMarin Jankovskihttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1947Use updated ruby in our builders builder2017-09-25T20:40:36ZDJ MountneyUse updated ruby in our builders builderThis is the corresponding update for https://gitlab.com/gitlab-org/gitlab-omnibus-builder/merge_requests/57
That change also ended up switching our debian build image from Debian 9, to Debian 9.1
There is an issue with building native ...This is the corresponding update for https://gitlab.com/gitlab-org/gitlab-omnibus-builder/merge_requests/57
That change also ended up switching our debian build image from Debian 9, to Debian 9.1
There is an issue with building native extensions if you are using a ruby built on the wrong version, so we need to introduce some change to bust the debian 9 ruby cache in omnibus. (In order to make sure it rebuilds ruby)
In this MR I busted the cache by changing our CI job name to Debian 9.1, there may be a nicer way to do it. Open for suggestions.
cc\ @gitlab-build-team10.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1910Remove TLSv1 from the list of accepted protocols.2017-09-25T15:12:33ZMarin JankovskiRemove TLSv1 from the list of accepted protocols.Fixes gitlab-org/omnibus-gitlab#2666Fixes gitlab-org/omnibus-gitlab#266610.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1954Fix the check for an installed postgres version2017-09-22T13:13:37ZDJ MountneyFix the check for an installed postgres versionHave it exit success if there is nothing new to upgrade to.Have it exit success if there is nothing new to upgrade to.10.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1946Resolve "Consul logs a critical warning on standby postgresql nodes"2017-09-21T20:17:19ZIan BaumResolve "Consul logs a critical warning on standby postgresql nodes"Closes #2773Closes #277310.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1952Resolve "Consul servers cannot run consul commands by default"2017-09-21T20:17:19ZIan BaumResolve "Consul servers cannot run consul commands by default"Closes #2793Closes #279310.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1948Resolve "Real IP Registry Proxy"2017-09-21T20:17:18ZJason PlumResolve "Real IP Registry Proxy"Add the NGINX RealIP module configuration for Registry and Pages
Add tests for all `nginx[real_ip_*]` settings, across all configuration files.
Closes #1914
Replaces !1270Add the NGINX RealIP module configuration for Registry and Pages
Add tests for all `nginx[real_ip_*]` settings, across all configuration files.
Closes #1914
Replaces !127010.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1939Resolve "PG HA setup trying to connect to db as gitlab-consul user"2017-09-20T23:07:57ZIan BaumResolve "PG HA setup trying to connect to db as gitlab-consul user"Closes #2786Closes #278610.0DJ MountneyDJ Mountneyhttps://staging.gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/1945Resolve "Don't add duplicate entries to pg_auth"2017-09-20T18:21:06ZIan BaumResolve "Don't add duplicate entries to pg_auth"Closes #2721Closes #272110.0DJ MountneyDJ Mountney