| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|\ \
| | |
| | |
| | |
| | | |
Log same correlation_id on auth keys check of ssh connections
See merge request gitlab-org/gitlab-shell!501
|
|/ / |
|
|\ \
| | |
| | |
| | |
| | | |
Update go-proxyproto to v0.6.0
See merge request gitlab-org/gitlab-shell!499
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
From https://github.com/pires/go-proxyproto/releases:
Prevent potentially malicious client(s) from opening connections and not
send the proxy protocol header, which could lead to DoS as the server
would hold those socket descriptors open indefinitely, eventually
running out of resources. The solution is to set a read deadline when
waiting for the PROXY protocol header:
https://github.com/pires/go-proxyproto/pull/74
|
|\ \ \
| |/ /
|/| |
| | |
| | | |
Make gofmt check fail if there are any matching files
See merge request gitlab-org/gitlab-shell!500
|
| | | |
|
|/ /
| |
| |
| |
| |
| |
| |
| | |
gofmt doesn't return an exit code 1 if there are matching files:
https://github.com/golang/go/issues/24230
To fix this, use the same trick we use in Workhorse to parse output.
Also add a `make fmt` step to format all the code properly.
|
|\ \
| | |
| | |
| | |
| | | |
Switch to labkit/log for logging functionality
See merge request gitlab-org/gitlab-shell!498
|
| | | |
|
|\ \ \
| |/ /
|/| |
| | |
| | |
| | |
| | | |
Unit tests for internal/sshd/connection.go
Closes #521
See merge request gitlab-org/gitlab-shell!497
|
|/ / |
|
|\ \
| | |
| | |
| | |
| | | |
Prometheus metrics for HTTP requests
See merge request gitlab-org/gitlab-shell!496
|
|/ /
| |
| |
| |
| | |
A RoundTripper for tracking the duration of an http request
is introduced
|
|\ \
| | |
| | |
| | |
| | | |
Add tracing instrumentation to http client
See merge request gitlab-org/gitlab-shell!495
|
| | |
| | |
| | |
| | | |
already includes it
|
|/ / |
|
|\ \
| | |
| | |
| | |
| | | |
Provide liveness and readiness probes
See merge request gitlab-org/gitlab-shell!494
|
|/ /
| |
| |
| |
| | |
They are going to be used to determine whether a server is alive
and ready to accept traffic
|
|\ \
| | |
| | |
| | |
| | | |
Shutdown sshd gracefully
See merge request gitlab-org/gitlab-shell!484
|
|/ /
| |
| |
| |
| |
| |
| |
| | |
When interruption signal is sent, we are closing ssh listener to
prevent it from accepting new connections
Then after configured grace period, we cancel the context to
cancel all ongoing operations
|
|\ \
| | |
| | |
| | |
| | | |
Refactor testhelper.PrepareTestRootDir using t.Cleanup
See merge request gitlab-org/gitlab-shell!493
|
| | | |
|
|\ \ \
| | | |
| | | |
| | | |
| | | | |
Change default logging format to JSON
See merge request gitlab-org/gitlab-shell!476
|
| | | |
| | | |
| | | |
| | | | |
Edited log_format description comment, if for 'text' if a user need 'text' logging
|
| | | | |
|
| | | | |
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Release v13.20.0
See merge request gitlab-org/gitlab-shell!492
|
|/ / / / |
|
|\ \ \ \
| |_|/ /
|/| | |
| | | |
| | | | |
Fix the Geo SSH push proxy hanging
See merge request gitlab-org/gitlab-shell!487
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Geo SSH proxy push currently impossible when the only
action that happens is branch removal. This fix
works in a way that it waits for flush packet from git
and then checks pkt lines to determine is pack data is expected.
The thing is that git doesnt send pack data when only
branch removal happens. Explanation is in
https://gitlab.com/gitlab-org/gitlab/-/issues/330494
|
|\ \ \ \
| | | | |
| | | | |
| | | | |
| | | | | |
Remove bin/authorized_keys
See merge request gitlab-org/gitlab-shell!491
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
We committed to removing this script in the 13.x release cycle, and it
was announced then, but we never actually got around to it.
Its functionality is completely replicated, in a safer manner, by the
bin/gitlab-shell-authorized-keys script.
Changelog: removed
|
|\ \ \ \ \
| |_|/ / /
|/| | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add a make install command
Closes #475
See merge request gitlab-org/gitlab-shell!490
|
| |/ / /
| | | |
| | | |
| | | | |
Changelog: added
|
|\ \ \ \
| |/ / /
|/| | |
| | | |
| | | | |
Fix a failing spec
See merge request gitlab-org/gitlab-shell!489
|
|/ / /
| | |
| | |
| | |
| | |
| | |
| | | |
When the shell environment includes SSH_CONNECTION, one spec fails as
the way we're stubbing the environment to the subprocess doesn't wipe
out the pre-existing variable. This commit changes how we do it so the
spec passes even in this environment.
|
|\ \ \
| |_|/
|/| |
| | |
| | | |
Create PROCESS.md page with Security release process
See merge request gitlab-org/gitlab-shell!488
|
|/ / |
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | | |
Standardize logging timestamp format
Closes #140
See merge request gitlab-org/gitlab-shell!485
|
|/ / |
|
|\ \
| | |
| | |
| | |
| | | |
"Limits" to "Limit" on line 10 to align tenses
See merge request gitlab-org/gitlab-shell!483
|
|/ / |
|
|\ \
| | |
| | |
| | |
| | | |
Release v13.19.0
See merge request gitlab-org/gitlab-shell!482
|
|/ / |
|
|\ \
| | |
| | |
| | |
| | | |
Add acceptance test for git-upload-pack
See merge request gitlab-org/gitlab-shell!477
|
| | |
| | |
| | |
| | | |
Contributes to https://gitlab.com/gitlab-org/gitlab-shell/-/issues/500
|
|\ \ \
| | | |
| | | |
| | | |
| | | | |
fix: upgrade of the gitaly dependency
See merge request gitlab-org/gitlab-shell!481
|
|/ / /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Gitaly project now properly respects module release flow
and includes a module suffix in the package name. It requires
to re-write all non-suffixed imports with suffixed of a specific
version of tha module. With proper module versioning we don't
need to use a 'replace' directive to point to specific commit
and can use semantic versioning for the gitaly dependency.
Part of: https://gitlab.com/gitlab-org/gitaly/-/issues/3177
|