If the feature flag `ci_dag_limit_needs` is turned on for a GitLab
instance, a job can now depend on up to ten jobs instead of five

Allison Browne authored Dec 10, 2019 and Bob Van Landuyt :neckbeard: committed Dec 10, 2019

Add table to store the sentry event and issue ids
that are related to a gitlab issue

This MR extracts a lot of functinality
from ProjectTreeRestorer into RelationTreeRestorer
 in order to introduce a new GroupTreeRestorer
that is going to utilize this logic as well.

This MR Also changes a few other classes
to make them compatible with groups.

Igor Frenkel authored Dec 09, 2019 and Nick Thomas committed Dec 09, 2019

- Update mr id in changelog
- Add new dependency scanning var
- Fix position of var

This commit persists and controls auto stop date for environments

Kerri Miller authored Dec 09, 2019 and Grzegorz Bizon committed Dec 09, 2019

.

drew authored Dec 09, 2019 and Grzegorz Bizon committed Dec 09, 2019

Allows for including or excluding bridge jobs via `rules:` to control
triggering of downstream (multi-project) Pipelines.

This aligns with offset pagination, where we also allow up to 100
records max.

This is the squashed together change from
https://gitlab.com/gitlab-org/gitlab/merge_requests/19623
that had been reverted previously.

Based on the refactoring in
https://gitlab.com/gitlab-org/gitlab/merge_requests/21130

It works the same way as https://gitlab.com/gitlab-org/gitlab/merge_requests/14846:

It consists of two parts:

1. Redirecting users to the configured external storage
1. Allowing the external storage to request the static object(s)
   on behalf of the user by means of specific tokens

Related to https://gitlab.com/gitlab-com/gl-infra/scalability/issues/4

Sean Arnold authored Dec 06, 2019 and Jan Provaznik committed Dec 06, 2019

- Squashed commit containing GraphQL changes

Gabriel Mazetto authored Dec 06, 2019 and Mayra Cabrera committed Dec 06, 2019

An attachment from an unmigrated project will only be using the legacy
storage when stored locally. Any file on object storage already use
hashed storage format.

Matt Kasa authored Dec 06, 2019 and Thong Kuah committed Dec 06, 2019

Relates to https://gitlab.com/gitlab-org/gitlab/merge_requests/20244

Co-Authored-By: Thong Kuah <tkuah@gitlab.com>

Moved pushing the FE feature flag

Now, instead of doing ot from Snippets controller, we do it from
gon_helper to make it shared between all types of snippets

This reverts merge request !21088

It uses the existing cache for the
MergeRequestDiffBatch collection class.

Add a layer of CI configuration on top of the .gitlab-ci.yml
which uses `include:` feature to include a file from repository,
from a remote URL or from a template (Auto-DevOps)

Matthias Käppler authored Dec 05, 2019 and Grzegorz Bizon committed Dec 05, 2019

We tested this with a large import and it's a pretty safe change

Moved pushing the FE feature flag

Now, instead of doing ot from Snippets controller, we do it from
gon_helper to make it shared between all types of snippets

- Refactor ActionRateLimiter
- Add rate limits to Project Export API

Adds partial indices to keys within `ci_variables` and
`ci_pipeline_variables` tables to track configuration of Web Application
Firewall for running environments

Adam Cohen authored Dec 04, 2019 and Jan Provaznik committed Dec 04, 2019

- Version 1 of the Container Scanning tool
  produced a report using the format specified by
  clair-scanner (github.com/arminc/clair-scanner),
  however, version 2 of the Container Scanning
  tool now produces a report using the GitLab
  Analyzers Common Library Format.  In order to
  make use of the new report format, we need to
  update the CS_MAJOR_VERSION.

Thong Kuah authored Dec 04, 2019 and Jan Provaznik committed Dec 04, 2019

This upgrades Helm to 2.6.1 which matches current GitLab Managed apps.

See https://gitlab.com/gitlab-org/cluster-integration/cluster-applications/-/releases#v0.2.0

Under the hood, #multi uses #pipelined, and we don't care about the
minor differences that using the #multi transaction approach gets us, so
we pick up about 0.1 sec of performance on large-ish diff collections.
This is a minor improvement, but as this is more or less a straight
drop-in replacement, and we're already workign directly with redis-rb,
it seems worthwhile.

We block IP addresses when failed Git auths reach a certain
threshold.

This block applied to all requests so for every request, we
had to check Redis to see if the IP is blocked. This caused
unnecessary Redis load.

This MR changes the block to only apply to Git requests as
it is described in the documentation

Also, add docs on how to use this template to install GitLab managed
apps (v2)

Alex Ives authored Nov 15, 2019 and Matt Kasa committed Dec 02, 2019

- Add RBAC permission to list deployments in knative-serving namespace
- Ensure service account has new permission
- Update documentation to instruct people to add the ability to list
  deployments in knative-serving
- Add get_cluster_role_bindings delegation to kubeclient
- Add KnativeVersionRoleBindingFinder
- Add knative_version_role_binding to KubernetesNamespace prereq
- Update tests for knative version role and binding

Relates to https://gitlab.com/gitlab-org/gitlabktl/issues/17

Co-Authored-By: Matt Kasa <mkasa@gitlab.com>

This reverts merge request !19623