Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- username@servername:~$ sudo EXTERNAL_URL="http://10.7.2.xxx" apt install gitlab-ee
- Reading package lists... Done
- Building dependency tree
- Reading state information... Done
- The following NEW packages will be installed:
- gitlab-ee
- 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
- Need to get 0 B/1,039 MB of archives.
- After this operation, 2,841 MB of additional disk space will be used.
- Selecting previously unselected package gitlab-ee.
- (Reading database ... 115112 files and directories currently installed.)
- Preparing to unpack .../gitlab-ee_14.4.2-ee.0_amd64.deb ...
- Unpacking gitlab-ee (14.4.2-ee.0) ...
- Setting up gitlab-ee (14.4.2-ee.0) ...
- Starting Chef Infra Client, version 15.17.4
- resolving cookbooks for run list: ["gitlab-ee"]
- Synchronizing Cookbooks:
- - gitlab-ee (0.0.1)
- - package (0.1.0)
- - gitlab (0.0.1)
- - consul (0.1.0)
- - patroni (0.1.0)
- - pgbouncer (0.1.0)
- - runit (5.1.3)
- - logrotate (0.1.0)
- - postgresql (0.1.0)
- - redis (0.1.0)
- - monitoring (0.1.0)
- - registry (0.1.0)
- - mattermost (0.1.0)
- - gitaly (0.1.0)
- - praefect (0.1.0)
- - gitlab-kas (0.1.0)
- - gitlab-pages (0.1.0)
- - letsencrypt (0.1.0)
- - nginx (0.1.0)
- - acme (4.1.3)
- - crond (0.1.0)
- Installing Cookbook Gems:
- Compiling Cookbooks...
- Recipe: gitlab::default
- * directory[/etc/gitlab] action create
- - change mode from '0755' to '0775'
- Converging 303 resources
- * directory[/etc/gitlab] action create (up to date)
- * directory[Create /var/opt/gitlab] action create
- - create new directory /var/opt/gitlab
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * directory[Create /var/log/gitlab] action create (up to date)
- * directory[/opt/gitlab/embedded/etc] action create
- - create new directory /opt/gitlab/embedded/etc
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * template[/opt/gitlab/embedded/etc/gitconfig] action create
- - create new file /opt/gitlab/embedded/etc/gitconfig
- - update content in file /opt/gitlab/embedded/etc/gitconfig from none to 5a725a
- --- /opt/gitlab/embedded/etc/gitconfig 2021-11-09 21:15:16.179537769 +0000
- +++ /opt/gitlab/embedded/etc/.chef-gitconfig20211109-12195-1gjk86b 2021-11-09 21:15:16.179537769 +0000
- @@ -1 +1,17 @@
- +[pack]
- + threads = 1
- +[receive]
- + fsckObjects = true
- +advertisePushOptions = true
- +[repack]
- + writeBitmaps = true
- +[transfer]
- + hideRefs=^refs/tmp/
- +hideRefs=^refs/keep-around/
- +hideRefs=^refs/remotes/
- +[core]
- + alternateRefsCommand="exit 0 #"
- +fsyncObjectFiles = true
- +[fetch]
- + writeCommitGraph = true
- - change mode from '' to '0755'
- Recipe: gitlab::web-server
- * account[Webserver user and group] action create
- * group[Webserver user and group] action create
- - create group gitlab-www
- * linux_user[Webserver user and group] action create
- - create user gitlab-www
- Recipe: gitlab::users
- * directory[/var/opt/gitlab] action create (up to date)
- * account[GitLab user and group] action create
- * group[GitLab user and group] action create
- - create group git
- * linux_user[GitLab user and group] action create
- - create user git
- * template[/var/opt/gitlab/.gitconfig] action create
- - create new file /var/opt/gitlab/.gitconfig
- - update content in file /var/opt/gitlab/.gitconfig from none to 13a569
- --- /var/opt/gitlab/.gitconfig 2021-11-09 21:15:16.415535502 +0000
- +++ /var/opt/gitlab/.chef-.gitconfig20211109-12195-hnocy.gitconfig 2021-11-09 21:15:16.415535502 +0000
- @@ -1 +1,14 @@
- +# This file is managed by gitlab-ctl. Manual changes will be
- +# erased! To change the contents below, edit /etc/gitlab/gitlab.rb
- +# and run `sudo gitlab-ctl reconfigure`.
- +
- +[user]
- + name = GitLab
- + email = [email protected]
- +[core]
- + autocrlf = input
- + alternateRefsCommand="exit 0 #"
- + fsyncObjectFiles = true
- +[gc]
- + auto = 0
- - change mode from '' to '0644'
- - change owner from '' to 'git'
- - change group from '' to 'git'
- * directory[/var/opt/gitlab/.bundle] action create
- - create new directory /var/opt/gitlab/.bundle
- - change owner from '' to 'git'
- - change group from '' to 'git'
- Recipe: gitlab::gitlab-shell
- * storage_directory[/var/opt/gitlab/.ssh] action create
- * ruby_block[directory resource: /var/opt/gitlab/.ssh] action run
- - execute the ruby block directory resource: /var/opt/gitlab/.ssh
- * directory[/var/log/gitlab/gitlab-shell/] action create
- - create new directory /var/log/gitlab/gitlab-shell/
- - change mode from '' to '0700'
- - change owner from '' to 'git'
- * directory[/var/opt/gitlab/gitlab-shell] action create
- - create new directory /var/opt/gitlab/gitlab-shell
- - change mode from '' to '0700'
- - change owner from '' to 'git'
- * templatesymlink[Create a config.yml and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-shell/config.yml] action create
- - create new file /var/opt/gitlab/gitlab-shell/config.yml
- - update content in file /var/opt/gitlab/gitlab-shell/config.yml from none to 237d3d
- --- /var/opt/gitlab/gitlab-shell/config.yml 2021-11-09 21:15:16.623533502 +0000
- +++ /var/opt/gitlab/gitlab-shell/.chef-config20211109-12195-1e93glo.yml 2021-11-09 21:15:16.623533502 +0000
- @@ -1 +1,45 @@
- +# This file is managed by gitlab-ctl. Manual changes will be
- +# erased! To change the contents below, edit /etc/gitlab/gitlab.rb
- +# and run `sudo gitlab-ctl reconfigure`.
- +
- +# GitLab user. git by default
- +user: git
- +
- +# Url to gitlab instance. Used for api calls. May but need not end with a slash.
- +gitlab_url: "http+unix://%2Fvar%2Fopt%2Fgitlab%2Fgitlab-workhorse%2Fsockets%2Fsocket"
- +
- +gitlab_relative_url_root:
- +
- +http_settings:
- +
- +# user: someone
- +# password: somepass
- +# ca_file: /etc/ssl/cert.pem
- +# ca_path: /etc/pki/tls/certs
- +# self_signed_cert: false
- +
- +# File used as authorized_keys for gitlab user
- +auth_file: "/var/opt/gitlab/.ssh/authorized_keys"
- +
- +# SSL certificate dir where custom certificates can be placed
- +# https://golang.org/pkg/crypto/x509/
- +ssl_cert_dir: "/opt/gitlab/embedded/ssl/certs/"
- +
- +# Log file.
- +# Default is gitlab-shell.log in the root directory.
- +log_file: "/var/log/gitlab/gitlab-shell/gitlab-shell.log"
- +
- +# Log level. INFO by default
- +log_level:
- +
- +log_format: json
- +
- +# Audit usernames.
- +# Set to true to see real usernames in the logs instead of key ids, which is easier to follow, but
- +# incurs an extra API call on every gitlab-shell command.
- +audit_usernames:
- +
- +migration:
- + {"enabled":true,"features":[]}
- +
- - change mode from '' to '0640'
- - change owner from '' to 'root'
- - change group from '' to 'git'
- * link[Link /opt/gitlab/embedded/service/gitlab-shell/config.yml to /var/opt/gitlab/gitlab-shell/config.yml] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-shell/config.yml to /var/opt/gitlab/gitlab-shell/config.yml
- * link[/opt/gitlab/embedded/service/gitlab-shell/.gitlab_shell_secret] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-shell/.gitlab_shell_secret to /opt/gitlab/embedded/service/gitlab-rails/.gitlab_shell_secret
- * file[/var/opt/gitlab/.ssh/authorized_keys] action create_if_missing
- - create new file /var/opt/gitlab/.ssh/authorized_keys
- - change mode from '' to '0600'
- - change owner from '' to 'git'
- - change group from '' to 'git'
- Recipe: gitlab::gitlab-rails
- * storage_directory[/var/opt/gitlab/git-data] action create
- * ruby_block[directory resource: /var/opt/gitlab/git-data] action run
- - execute the ruby block directory resource: /var/opt/gitlab/git-data
- * storage_directory[/var/opt/gitlab/git-data/repositories] action create
- * ruby_block[directory resource: /var/opt/gitlab/git-data/repositories] action run
- - execute the ruby block directory resource: /var/opt/gitlab/git-data/repositories
- Recipe: gitlab::rails_pages_shared_path
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/pages] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/pages] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/pages
- Recipe: gitlab::gitlab-rails
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/artifacts] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/artifacts] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/artifacts
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/external-diffs] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/external-diffs] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/external-diffs
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/lfs-objects] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/lfs-objects] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/lfs-objects
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/packages] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/packages] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/packages
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/dependency_proxy] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/dependency_proxy] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/dependency_proxy
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/terraform_state] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/terraform_state] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/terraform_state
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/encrypted_settings] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/encrypted_settings] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/encrypted_settings
- * storage_directory[/var/opt/gitlab/gitlab-rails/uploads] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/uploads] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/uploads
- * storage_directory[/var/opt/gitlab/gitlab-ci/builds] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-ci/builds] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-ci/builds
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/cache] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/cache] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/cache
- * storage_directory[/var/opt/gitlab/gitlab-rails/shared/tmp] action create
- * ruby_block[directory resource: /var/opt/gitlab/gitlab-rails/shared/tmp] action run
- - execute the ruby block directory resource: /var/opt/gitlab/gitlab-rails/shared/tmp
- * storage_directory[/opt/gitlab/embedded/service/gitlab-rails/public] action create (skipped due to only_if)
- * directory[create /var/opt/gitlab/gitlab-rails/etc] action create
- - create new directory /var/opt/gitlab/gitlab-rails/etc
- - change mode from '' to '0700'
- - change owner from '' to 'git'
- * directory[create /opt/gitlab/etc/gitlab-rails] action create
- - create new directory /opt/gitlab/etc/gitlab-rails
- - change mode from '' to '0700'
- - change owner from '' to 'git'
- * directory[create /var/opt/gitlab/gitlab-rails/working] action create
- - create new directory /var/opt/gitlab/gitlab-rails/working
- - change mode from '' to '0700'
- - change owner from '' to 'git'
- * directory[create /var/opt/gitlab/gitlab-rails/tmp] action create
- - create new directory /var/opt/gitlab/gitlab-rails/tmp
- - change mode from '' to '0700'
- - change owner from '' to 'git'
- * directory[create /var/opt/gitlab/gitlab-rails/upgrade-status] action create
- - create new directory /var/opt/gitlab/gitlab-rails/upgrade-status
- - change mode from '' to '0700'
- - change owner from '' to 'git'
- * directory[create /var/log/gitlab/gitlab-rails] action create
- - create new directory /var/log/gitlab/gitlab-rails
- - change mode from '' to '0700'
- - change owner from '' to 'git'
- * storage_directory[/var/opt/gitlab/backups] action create
- * ruby_block[directory resource: /var/opt/gitlab/backups] action run
- - execute the ruby block directory resource: /var/opt/gitlab/backups
- * directory[/var/opt/gitlab/gitlab-rails] action create
- - change owner from 'root' to 'git'
- * directory[/var/opt/gitlab/gitlab-ci] action create
- - change owner from 'root' to 'git'
- * file[/var/opt/gitlab/gitlab-rails/etc/gitlab-registry.key] action create (skipped due to only_if)
- * template[/opt/gitlab/etc/gitlab-rails-rc] action create
- - create new file /opt/gitlab/etc/gitlab-rails-rc
- - update content in file /opt/gitlab/etc/gitlab-rails-rc from none to 7b16c8
- --- /opt/gitlab/etc/gitlab-rails-rc 2021-11-09 21:15:19.403506803 +0000
- +++ /opt/gitlab/etc/.chef-gitlab-rails-rc20211109-12195-1lfygpj 2021-11-09 21:15:19.403506803 +0000
- @@ -1 +1,6 @@
- +gitlab_user='git'
- +gitlab_group='git'
- +registry_dir=''
- +registry_user='registry'
- +registry_group='registry'
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * file[/opt/gitlab/etc/gitlab-rails/gitlab-rails-rc] action delete (up to date)
- * file[/opt/gitlab/embedded/service/gitlab-rails/.secret] action delete (up to date)
- * file[/var/opt/gitlab/gitlab-rails/etc/secret] action delete (up to date)
- * templatesymlink[Create a database.yml and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/database.yml] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/database.yml
- - update content in file /var/opt/gitlab/gitlab-rails/etc/database.yml from none to 9cd048
- --- /var/opt/gitlab/gitlab-rails/etc/database.yml 2021-11-09 21:15:19.467506189 +0000
- +++ /var/opt/gitlab/gitlab-rails/etc/.chef-database20211109-12195-aea1u6.yml 2021-11-09 21:15:19.467506189 +0000
- @@ -1 +1,32 @@
- +# This file is managed by gitlab-ctl. Manual changes will be
- +# erased! To change the contents below, edit /etc/gitlab/gitlab.rb
- +# and run `sudo gitlab-ctl reconfigure`.
- +
- +production:
- + main:
- + adapter: postgresql
- + encoding: unicode
- + collation:
- + database: gitlabhq_production
- + username: "gitlab"
- + password:
- + host: "/var/opt/gitlab/postgresql"
- + port: 5432
- + socket:
- + sslmode:
- + sslcompression: 0
- + sslrootcert:
- + sslca:
- + load_balancing: {"hosts":[]}
- + prepared_statements: false
- + statement_limit: 1000
- + connect_timeout:
- + keepalives:
- + keepalives_idle:
- + keepalives_interval:
- + keepalives_count:
- + tcp_user_timeout:
- + application_name:
- + variables:
- + statement_timeout:
- - change mode from '' to '0640'
- - change owner from '' to 'root'
- - change group from '' to 'git'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/database.yml to /var/opt/gitlab/gitlab-rails/etc/database.yml] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/config/database.yml to /var/opt/gitlab/gitlab-rails/etc/database.yml
- * templatesymlink[Create a secrets.yml and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/secrets.yml] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/secrets.yml
- - update content in file /var/opt/gitlab/gitlab-rails/etc/secrets.yml from none to 3a9935
- - suppressed sensitive resource
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/secrets.yml to /var/opt/gitlab/gitlab-rails/etc/secrets.yml] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/config/secrets.yml to /var/opt/gitlab/gitlab-rails/etc/secrets.yml
- * templatesymlink[Create a resque.yml and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/resque.yml] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/resque.yml
- - update content in file /var/opt/gitlab/gitlab-rails/etc/resque.yml from none to ec4232
- --- /var/opt/gitlab/gitlab-rails/etc/resque.yml 2021-11-09 21:15:19.511505767 +0000
- +++ /var/opt/gitlab/gitlab-rails/etc/.chef-resque20211109-12195-1sulun7.yml 2021-11-09 21:15:19.511505767 +0000
- @@ -1 +1,3 @@
- +production:
- + url: unix:/var/opt/gitlab/redis/redis.socket
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/resque.yml to /var/opt/gitlab/gitlab-rails/etc/resque.yml] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/config/resque.yml to /var/opt/gitlab/gitlab-rails/etc/resque.yml
- * templatesymlink[Create a cable.yml and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/cable.yml] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/cable.yml
- - update content in file /var/opt/gitlab/gitlab-rails/etc/cable.yml from none to 551667
- --- /var/opt/gitlab/gitlab-rails/etc/cable.yml 2021-11-09 21:15:19.531505575 +0000
- +++ /var/opt/gitlab/gitlab-rails/etc/.chef-cable20211109-12195-7hcv6j.yml 2021-11-09 21:15:19.531505575 +0000
- @@ -1 +1,4 @@
- +production:
- + adapter: redis
- + url: unix:/var/opt/gitlab/redis/redis.socket
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/cable.yml to /var/opt/gitlab/gitlab-rails/etc/cable.yml] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/config/cable.yml to /var/opt/gitlab/gitlab-rails/etc/cable.yml
- * templatesymlink[Create a redis.cache.yml and create a symlink to Rails root] action create (skipped due to not_if)
- * file[/opt/gitlab/embedded/service/gitlab-rails/config/redis.cache.yml] action delete (up to date)
- * file[/var/opt/gitlab/gitlab-rails/etc/redis.cache.yml] action delete (up to date)
- * templatesymlink[Create a redis.queues.yml and create a symlink to Rails root] action create (skipped due to not_if)
- * file[/opt/gitlab/embedded/service/gitlab-rails/config/redis.queues.yml] action delete (up to date)
- * file[/var/opt/gitlab/gitlab-rails/etc/redis.queues.yml] action delete (up to date)
- * templatesymlink[Create a redis.shared_state.yml and create a symlink to Rails root] action create (skipped due to not_if)
- * file[/opt/gitlab/embedded/service/gitlab-rails/config/redis.shared_state.yml] action delete (up to date)
- * file[/var/opt/gitlab/gitlab-rails/etc/redis.shared_state.yml] action delete (up to date)
- * templatesymlink[Create a redis.trace_chunks.yml and create a symlink to Rails root] action create (skipped due to not_if)
- * file[/opt/gitlab/embedded/service/gitlab-rails/config/redis.trace_chunks.yml] action delete (up to date)
- * file[/var/opt/gitlab/gitlab-rails/etc/redis.trace_chunks.yml] action delete (up to date)
- * templatesymlink[Create a redis.rate_limiting.yml and create a symlink to Rails root] action create (skipped due to not_if)
- * file[/opt/gitlab/embedded/service/gitlab-rails/config/redis.rate_limiting.yml] action delete (up to date)
- * file[/var/opt/gitlab/gitlab-rails/etc/redis.rate_limiting.yml] action delete (up to date)
- * templatesymlink[Create a smtp_settings.rb and create a symlink to Rails root] action delete
- * file[/var/opt/gitlab/gitlab-rails/etc/smtp_settings.rb] action delete (up to date)
- * link[/opt/gitlab/embedded/service/gitlab-rails/config/initializers/smtp_settings.rb] action delete (up to date)
- (up to date)
- * templatesymlink[Create a gitlab.yml and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/gitlab.yml] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/gitlab.yml
- - update content in file /var/opt/gitlab/gitlab-rails/etc/gitlab.yml from none to 239aaf
- --- /var/opt/gitlab/gitlab-rails/etc/gitlab.yml 2021-11-09 21:15:19.711503847 +0000
- +++ /var/opt/gitlab/gitlab-rails/etc/.chef-gitlab20211109-12195-1on99ux.yml 2021-11-09 21:15:19.711503847 +0000
- @@ -1 +1,804 @@
- +# This file is managed by gitlab-ctl. Manual changes will be
- +# erased! To change the contents below, edit /etc/gitlab/gitlab.rb
- +# and run `sudo gitlab-ctl reconfigure`.
- +
- +production: &base
- + #
- + # 1. GitLab app settings
- + # ==========================
- +
- + ## GitLab settings
- + gitlab:
- + ## Web server settings (note: host is the FQDN, do not include http://)
- + host: 10.7.2.xxx
- + port: 80
- + https: false
- +
- + # The maximum time puma can spend on the request. This needs to be smaller than the worker timeout.
- + # Default is 95% of the worker timeout
- + max_request_duration_seconds: 57
- +
- + # Uncommment this line below if your ssh host is different from HTTP/HTTPS one
- + # (you'd obviously need to replace ssh.host_example.com with your own host).
- + # Otherwise, ssh host will be set to the `host:` value above
- + ssh_host:
- +
- + # If your ssh user differs from the system user, you need to specify it here
- + # Set it to an empty string to omit the username from any ssh url altogether
- + ssh_user:
- +
- + # WARNING: See config/application.rb under "Relative url support" for the list of
- + # other files that need to be changed for relative url support
- + relative_url_root:
- +
- + # Trusted Proxies
- + # Customize if you have GitLab behind a reverse proxy which is running on a different machine.
- + # Add the IP address for your reverse proxy to the list, otherwise users will appear signed in from that address.
- + trusted_proxies:
- +
- +
- +
- + # Uncomment and customize if you can't use the default user to run GitLab (default: 'git')
- + user: git
- +
- + ## Date & Time settings
- + time_zone:
- +
- + ## Email settings
- + # Uncomment and set to false if you need to disable email sending from GitLab (default: true)
- + email_enabled:
- + # Email address used in the "From" field in mails sent by GitLab
- + email_from: [email protected]
- + email_display_name:
- + email_reply_to:
- + email_subject_suffix:
- + # Email SMIME signing settings
- + email_smime:
- + enabled: false
- + key_file: /etc/gitlab/ssl/gitlab_smime.key
- + cert_file: /etc/gitlab/ssl/gitlab_smime.crt
- + ca_certs_file:
- +
- + # Email server smtp settings are in [a separate file](initializers/smtp_settings.rb.sample).
- +
- + ## User settings
- + default_can_create_group: # default: true
- + username_changing_enabled: # default: true - User can change her username/namespace
- + ## Default theme
- + ## 1 - Graphite
- + ## 2 - Charcoal
- + ## 3 - Green
- + ## 4 - Gray
- + ## 5 - Violet
- + ## 6 - Blue
- + default_theme: # default: 2
- +
- + ## Automatic issue closing
- + # If a commit message matches this regular expression, all issues referenced from the matched text will be closed.
- + # This happens when the commit is pushed or merged into the default branch of a project.
- + # When not specified the default issue_closing_pattern as specified below will be used.
- + # Tip: you can test your closing pattern at http://rubular.com
- + issue_closing_pattern:
- +
- + ## Default project features settings
- + default_projects_features:
- + issues:
- + merge_requests:
- + wiki:
- + snippets:
- + builds:
- + container_registry:
- +
- + ## Webhook settings
- + # Number of seconds to wait for HTTP response after sending webhook HTTP POST request (default: 10)
- + webhook_timeout:
- +
- + ### GraphQL Settings
- + # Tells the rails application how long it has to complete a GraphQL request.
- + # We suggest this value to be higher than the database timeout value
- + # and lower than the worker timeout set in puma. (default: 30)
- + graphql_timeout:
- +
- + ## Repository downloads directory
- + # When a user clicks e.g. 'Download zip' on a project, a temporary zip file is created in the following directory.
- + # The default is 'tmp/repositories' relative to the root of the Rails app.
- + repository_downloads_path:
- +
- + ## Impersonation settings
- + impersonation_enabled:
- +
- + ## Application settings cache expiry in seconds. (default: 60)
- + application_settings_cache_seconds:
- +
- + usage_ping_enabled:
- +
- + ## Print initial root password to stdout during initialization
- + display_initial_root_password: false
- +
- + ## Reply by email
- + # Allow users to comment on issues and merge requests by replying to notification emails.
- + # For documentation on how to set this up, see https://docs.gitlab.com/ee/administration/reply_by_email.html
- + incoming_email:
- + enabled: false
- +
- + # The email address including the `%{key}` placeholder that will be replaced to reference the item being replied to.
- + # The placeholder can be omitted but if present, it must appear in the "user" part of the address (before the `@`).
- + address:
- +
- + # Email account username
- + # With third party providers, this is usually the full email address.
- + # With self-hosted email servers, this is usually the user part of the email address.
- + user:
- + # Email account password
- + password:
- +
- + # IMAP server host
- + host:
- + # IMAP server port
- + port:
- + # Whether the IMAP server uses SSL
- + ssl:
- + # Whether the IMAP server uses StartTLS
- + start_tls:
- +
- + # Inbox configuration (for Microsoft Graph)
- + inbox_method: imap
- +
- + # The mailbox where incoming mail will end up. Usually "inbox".
- + mailbox: "inbox"
- + # The IDLE command timeout.
- + idle_timeout:
- + # file path of internal `mail_room` JSON logs
- + log_path: /var/log/gitlab/mailroom/mail_room_json.log
- +
- + # Whether to expunge (permanently remove) messages from the mailbox when they are deleted after delivery
- + expunge_deleted:
- +
- +
- + ## Service desk email
- + # Allow users to use a separate service desk address
- + # For documentation on how to set this up, see http://doc.gitlab.com/ce/administration/reply_by_email.html
- + service_desk_email:
- + enabled: false
- +
- + # The email address including the `%{key}` placeholder that will be replaced to reference the item being replied to.
- + # The placeholder can be omitted but if present, it must appear in the "user" part of the address (before the `@`).
- + address:
- +
- + # Email account username
- + # With third party providers, this is usually the full email address.
- + # With self-hosted email servers, this is usually the user part of the email address.
- + user:
- + # Email account password
- + password:
- +
- + # IMAP server host
- + host:
- + # IMAP server port
- + port:
- + # Whether the IMAP server uses SSL
- + ssl:
- + # Whether the IMAP server uses StartTLS
- + start_tls:
- +
- + # Inbox configuration (for Microsoft Graph)
- + inbox_method: imap
- +
- + # The mailbox where incoming mail will end up. Usually "inbox".
- + mailbox: "inbox"
- + # The IDLE command timeout.
- + idle_timeout:
- + # file path of internal `mail_room` JSON logs
- + log_path: /var/log/gitlab/mailroom/mail_room_json.log
- +
- + ## Build Artifacts
- + artifacts:
- + enabled: true
- + # The location where Build Artifacts are stored (default: shared/artifacts).
- + path: /var/opt/gitlab/gitlab-rails/shared/artifacts
- + object_store:
- + enabled: false
- + direct_upload: false
- + background_upload: true
- + proxy_download: false
- + remote_directory: "artifacts"
- + connection: {}
- +
- + ## External merge request diffs
- + external_diffs:
- + enabled:
- + # The location where merge request diffs are stored (default: shared/external-diffs).
- + storage_path: /var/opt/gitlab/gitlab-rails/shared/external-diffs
- + object_store:
- + enabled: false
- + direct_upload: false
- + background_upload: true
- + proxy_download: false
- + remote_directory: "external-diffs"
- + connection: {}
- +
- + ## Git LFS
- + lfs:
- + enabled:
- + # The location where LFS objects are stored (default: shared/lfs-objects).
- + storage_path: /var/opt/gitlab/gitlab-rails/shared/lfs-objects
- + object_store:
- + enabled: false
- + direct_upload: false
- + background_upload: true
- + proxy_download: false
- + remote_directory: "lfs-objects"
- + connection: {}
- +
- + ## Uploads
- + uploads:
- + # The location where uploads objects are stored (default: public/).
- + storage_path: /opt/gitlab/embedded/service/gitlab-rails/public
- + object_store:
- + enabled: false
- + direct_upload: false
- + background_upload: true
- + proxy_download: false
- + remote_directory: "uploads"
- + connection: {}
- +
- + ## Packages
- + packages:
- + enabled:
- + # The location where build packages are stored (default: shared/packages).
- + storage_path: /var/opt/gitlab/gitlab-rails/shared/packages
- + object_store:
- + enabled: false
- + direct_upload: false
- + background_upload: true
- + proxy_download: false
- + remote_directory: "packages"
- + connection: {}
- +
- + ## Dependency proxy (EE only)
- + dependency_proxy:
- + enabled:
- + # The location where dependency_proxy blobs are stored (default: shared/dependency_proxy).
- + storage_path: /var/opt/gitlab/gitlab-rails/shared/dependency_proxy
- + object_store:
- + enabled: false
- + direct_upload: false
- + background_upload: true
- + proxy_download: false
- + remote_directory: "dependency_proxy"
- + connection: {}
- +
- + ## Terraform state
- + terraform_state:
- + enabled:
- + # The location where terraform state files are stored (default: shared/terraform_state).
- + storage_path: /var/opt/gitlab/gitlab-rails/shared/terraform_state
- + object_store:
- + enabled: false
- + remote_directory: "terraform"
- + connection: {}
- +
- + ## Container Registry
- + registry:
- + enabled: false
- + host:
- + port:
- + api_url: # internal address to the registry, will be used by GitLab to directly communicate with API
- + path:
- + key: /var/opt/gitlab/gitlab-rails/etc/gitlab-registry.key
- + issuer: omnibus-gitlab-issuer
- + notification_secret:
- +
- + ## Kubernetes Agent Server
- + gitlab_kas:
- + enabled: false
- + internal_url:
- + external_url:
- +
- + ## Error Reporting and Logging with Sentry
- + sentry:
- + enabled: false
- + dsn:
- + clientside_dsn:
- + environment: # e.g. development, staging, production
- +
- + mattermost:
- + enabled: false
- + host:
- +
- + ## GitLab Pages
- + pages:
- + enabled: false
- + access_control: false
- + path: /var/opt/gitlab/gitlab-rails/shared/pages
- + host:
- + port:
- + https: false
- + external_http: false
- + external_https: false
- + artifacts_server: true
- + object_store:
- + enabled: false
- + remote_directory: "pages"
- + connection: {}
- + local_store:
- + enabled: true
- + path: /var/opt/gitlab/gitlab-rails/shared/pages
- +
- + ## Gravatar
- + ## For Libravatar see: https://docs.gitlab.com/ee/customization/libravatar.html
- + gravatar:
- + # gravatar urls: possible placeholders: %{hash} %{size} %{email}
- + plain_url: # default: http://www.gravatar.com/avatar/%{hash}?s=%{size}&d=identicon
- + ssl_url: # default: https://secure.gravatar.com/avatar/%{hash}?s=%{size}&d=identicon
- +
- + ## Sidekiq
- + sidekiq:
- + log_format: json
- +
- + ## Auxiliary jobs
- + # Periodically executed jobs, to self-heal GitLab, do external synchronizations, etc.
- + # Please read here for more information: https://github.com/ondrejbartas/sidekiq-cron#adding-cron-job
- + cron_jobs:
- + # Flag stuck CI builds as failed
- +
- + # Remove expired build artifacts
- +
- + # Stop expired environments
- +
- + # Schedule pipelines in the near future
- +
- + # Periodically run 'git fsck' on all repositories. If started more than
- + # once per hour you will have concurrent 'git fsck' jobs.
- +
- + # Send admin emails once a week
- +
- + # Send emails about personal tokens about to expired
- +
- + # Send emails about personal tokens that have expired
- +
- + # Remove outdated repository archives
- +
- + # Archive live traces which have not been archived yet
- +
- + # Verify custom GitLab Pages domains
- +
- + # Obtain and renew SSL certificates for pages domain through Let's Encrypt
- +
- + # Removes unverified pages domains
- +
- + # Remove unaccepted member invitations
- +
- + # Periodically migrate diffs from the database to external storage
- +
- + # Update CI Platform Metrics daily
- +
- + # Send emails about ssh keys that have expired
- +
- + # Send emails about ssh keys that are expiring soon
- +
- + ##
- + # GitLab EE only jobs:
- +
- + # Snapshot Devops Adoption statistics
- +
- + # Snapshot active users statistics
- +
- + # In addition to refreshing users when they log in,
- + # periodically refresh LDAP users membership.
- + # NOTE: This will only take effect if LDAP is enabled
- +
- + # GitLab LDAP group sync worker
- + # NOTE: This will only take effect if LDAP is enabled
- +
- + # GitLab Geo prune event log worker
- + # NOTE: This will only take effect if Geo is enabled (primary node only)
- +
- + # GitLab Geo repository sync worker
- + # NOTE: This will only take effect if Geo is enabled
- +
- + # GitLab Geo registry backfill worker
- + # NOTE: This will only take effect if Geo is enabled (secondary nodes only)
- +
- + # GitLab Geo Secondary Usage Data worker
- + # NOTE: This will only take effect if Geo and Usage Data are enabled (secondary nodes only)
- +
- + # GitLab Geo file download dispatch worker
- + # NOTE: This will only take effect if Geo is enabled
- +
- + # GitLab Geo repository verification primary batch worker
- + # NOTE: This will only take effect if Geo is enabled
- +
- + # GitLab Geo repository verification secondary scheduler worker
- + # NOTE: This will only take effect if Geo is enabled
- +
- + # GitLab Geo migrated local files clean up worker
- + # NOTE: This will only take effect if Geo is enabled (secondary nodes only)
- +
- + # Export pseudonymized data in CSV format for analysis
- +
- +
- + # Worker for triggering counter jobs for usage trends
- +
- + # Worker for triggering member invitation reminder emails
- +
- + # Worker for the scheduled user status cleanup
- +
- + # Worker for triggering in-product marketing emails
- +
- + ## Geo
- + # NOTE: These settings will only take effect if Geo is enabled
- + geo:
- + # This is an optional identifier which Geo nodes can use to identify themselves.
- + # For example, if external_url is the same for two secondaries, you must specify
- + # a unique Geo node name for those secondaries.
- + #
- + # If it is blank, it defaults to external_url.
- + node_name:
- +
- + registry_replication:
- + enabled: false
- + primary_api_url: # internal address to the primary registry, will be used by GitLab to directly communicate with primary registry API
- +
- + ## Feature Flag https://docs.gitlab.com/ee/user/project/operations/feature_flags.html
- + feature_flags:
- + unleash:
- + enabled: false
- +
- + #
- + # 2. GitLab CI settings
- + # ==========================
- +
- + gitlab_ci:
- + # Default project notifications settings:
- + #
- + # Send emails only on broken builds (default: true)
- + all_broken_builds:
- + #
- + # Add pusher to recipients list (default: false)
- + add_pusher:
- +
- + # The location where build traces are stored (default: builds/). Relative paths are relative to Rails.root
- + builds_path: /var/opt/gitlab/gitlab-ci/builds
- +
- + #
- + # 3. Auth settings
- + # ==========================
- +
- + ## LDAP settings
- + # You can inspect a sample of the LDAP users with login access by running:
- + # bundle exec rake gitlab:ldap:check RAILS_ENV=production
- + ldap:
- + enabled: false
- + sync_time:
- + prevent_ldap_sign_in: false
- + host:
- + port:
- + uid:
- + method: # "tls" or "ssl" or "plain"
- + bind_dn:
- + password:
- + active_directory:
- + allow_username_or_email_login:
- + lowercase_usernames:
- + base:
- + user_filter:
- +
- + ## EE only
- + group_base:
- + admin_group:
- + sync_ssh_keys:
- + sync_time:
- +
- + ## Smartcard authentication settings
- + smartcard:
- + # Allow smartcard authentication
- + enabled: false
- +
- + # Path to a file containing a CA certificate
- + ca_file: "/etc/gitlab/ssl/CA.pem"
- +
- + # Host and port where the client side certificate is requested by the
- + # webserver (NGINX/Apache)
- + client_certificate_required_host:
- + client_certificate_required_port: 3444
- +
- + # Browser session with smartcard sign-in is required for Git access
- + required_for_git_access: false
- +
- + # SAN extensions to match users with certificates
- + san_extensions: false
- +
- + ## Kerberos settings
- + kerberos:
- + # Allow the HTTP Negotiate authentication method for Git clients
- + enabled:
- +
- + # Kerberos 5 keytab file. The keytab file must be readable by the GitLab user,
- + # and should be different from other keytabs in the system.
- + # (default: use default keytab from Krb5 config)
- + keytab:
- +
- + # The Kerberos service name to be used by GitLab.
- + # (default: accept any service name in keytab file)
- + service_principal_name:
- +
- + # Kerberos realms/domains that are allowed to automatically link LDAP identities.
- + # By default, GitLab accepts a realm that matches the domain derived from the
- + # LDAP `base` DN. For example, `ou=users,dc=example,dc=com` would allow users
- + # with a realm matching `example.com`.
- + simple_ldap_linking_allowed_realms: null
- +
- + # Dedicated port: Git before 2.4 does not fall back to Basic authentication if Negotiate fails.
- + # To support both Basic and Negotiate methods with older versions of Git, configure
- + # nginx to proxy GitLab on an extra port (e.g. 8443) and uncomment the following lines
- + # to dedicate this port to Kerberos authentication. (default: false)
- + use_dedicated_port:
- + port:
- + https:
- +
- +
- + ## OmniAuth settings
- + omniauth:
- + # Allow login via Twitter, Google, etc. using OmniAuth providers
- + enabled:
- +
- + # Uncomment this to automatically sign in with a specific omniauth provider's without
- + # showing GitLab's sign-in page (default: show the GitLab sign-in page)
- + auto_sign_in_with_provider:
- +
- + # Sync user's email address from the specified Omniauth provider every time the user logs
- + # in (default: nil). And consequently make this field read-only.
- +
- + # Sync user's profile from the specified Omniauth providers every time the user logs in (default: empty).
- + # Define the allowed providers using an array, e.g. ["cas3", "saml", "twitter"],
- + # or as true/false to allow all providers or none.
- + # sync_profile_from_provider: []
- +
- + # Select which info to sync from the providers above. (default: email).
- + # Define the synced profile info using an array. Available options are "name", "email" and "location"
- + # e.g. ["name", "email", "location"] or as true to sync all available.
- + # This consequently will make the selected attributes read-only.
- + # sync_profile_attributes: true
- +
- + # CAUTION!
- + # This allows users to login without having a user account first. Define the allowed
- + # providers using an array, e.g. ["saml", "twitter"]
- + # User accounts will be created automatically when authentication was successful.
- + allow_single_sign_on: ["saml"]
- +
- + # Locks down those users until they have been cleared by the admin (default: true).
- + block_auto_created_users:
- + # Look up new users in LDAP servers. If a match is found (same uid), automatically
- + # link the omniauth identity with the LDAP account. (default: false)
- + auto_link_ldap_user:
- +
- + # Allow users with existing accounts to login and auto link their account via SAML
- + # login, without having to do a manual login first and manually add SAML
- + # (default: false)
- + auto_link_saml_user: null
- +
- + # Allow users with existing accounts to sign in and auto link their account via OmniAuth
- + # login, without having to do a manual login first and manually add OmniAuth. Links on email.
- + # Define the allowed providers using an array, e.g. ["saml", "twitter"], or as true/false to
- + # allow all providers or none.
- + # (default: false)
- + auto_link_user: null
- +
- + # Set different Omniauth providers as external so that all users creating accounts
- + # via these providers will not be able to have access to internal projects. You
- + # will need to use the full name of the provider, like `google_oauth2` for Google.
- + # Refer to the examples below for the full names of the supported providers.
- + # (default: [])
- + external_providers: null
- +
- + # CAUTION!
- + # This allows users to login with the specified providers without two factor. Define the allowed providers
- + # using an array, e.g. ["twitter", 'google_oauth2'], or as true/false to allow all providers or none.
- + # This option should only be configured for providers which already have two factor.
- + # (default: false)
- + allow_bypass_two_factor: null
- +
- + ## Auth providers
- + # Uncomment the following lines and fill in the data of the auth provider you want to use
- + # If your favorite auth provider is not listed you can use others:
- + # see https://github.com/gitlabhq/gitlab-public-wiki/wiki/Custom-omniauth-provider-configurations
- + # The 'app_id' and 'app_secret' parameters are always passed as the first two
- + # arguments, followed by optional 'args' which can be either a hash or an array.
- + # Documentation for this is available at https://docs.gitlab.com/ee/integration/omniauth.html
- + providers:
- + # - { name: 'google_oauth2', app_id: 'YOUR APP ID',
- + # app_secret: 'YOUR APP SECRET',
- + # args: { access_type: 'offline', approval_prompt: '' } }
- + # - { name: 'twitter', app_id: 'YOUR APP ID',
- + # app_secret: 'YOUR APP SECRET'}
- + # - { name: 'github', app_id: 'YOUR APP ID',
- + # app_secret: 'YOUR APP SECRET',
- + # args: { scope: 'user:email' } }
- +
- + ## cas3-specific settings, specifically session_duration:
- +
- + ## max SAML message size setting. Will be useful in case received SAML message is too big.
- +
- + # FortiAuthenticator settings
- + forti_authenticator:
- + # Allow using FortiAuthenticator as OTP provider
- + enabled: false
- +
- +
- + # FortiToken Cloud settings
- + forti_token_cloud:
- + # Allow using FortiToken Cloud as OTP provider
- + enabled: false
- +
- +
- + # Shared file storage settings
- + shared:
- + path: /var/opt/gitlab/gitlab-rails/shared
- +
- + # Encrypted Settings configuration
- + encrypted_settings:
- + path: /var/opt/gitlab/gitlab-rails/shared/encrypted_settings
- +
- + # Gitaly settings
- + # This setting controls whether GitLab uses Gitaly
- + # Eventually Gitaly use will become mandatory and
- + # this option will disappear.
- + gitaly:
- + client_path: /opt/gitlab/embedded/bin
- + token: ""
- +
- +
- + #
- + # 4. Advanced settings
- + # ==========================
- +
- + ## Repositories settings
- + repositories:
- + # Paths where repositories can be stored. Give the canonicalized absolute pathname.
- + # NOTE: REPOS PATHS MUST NOT CONTAIN ANY SYMLINK!!!
- + storages: {"default":{"path":"/var/opt/gitlab/git-data/repositories","gitaly_address":"unix:/var/opt/gitlab/gitaly/gitaly.socket"}}
- +
- + ## Backup settings
- + backup:
- + path: "/var/opt/gitlab/backups" # Relative paths are relative to Rails.root (default: tmp/backups/)
- + gitaly_backup_path: "/opt/gitlab/embedded/bin/gitaly-backup" # Path of the gitaly-backup binary (default: searches $PATH)
- + archive_permissions: # Permissions for the resulting backup.tar file (default: 0600)
- + keep_time: # default: 0 (forever) (in seconds)
- + pg_schema: # default: nil, it means that all schemas will be backed up
- + upload:
- + # Fog storage connection settings, see http://fog.io/storage/ .
- + connection:
- + # The remote 'directory' to store your backups. For S3, this would be the bucket name.
- + remote_directory:
- + multipart_chunk_size:
- + encryption:
- + encryption_key:
- + storage_options: {}
- + storage_class:
- +
- + ## Pseudonymizer settings
- + pseudonymizer:
- + manifest:
- + upload:
- + remote_directory:
- + connection: {}
- +
- + ## GitLab Shell settings
- + gitlab_shell:
- + path: /opt/gitlab/embedded/service/gitlab-shell/
- + hooks_path: /opt/gitlab/embedded/service/gitlab-shell/hooks/
- + authorized_keys_file: /var/opt/gitlab/.ssh/authorized_keys
- +
- + # Git over HTTP
- + upload_pack:
- + receive_pack:
- +
- + # If you use non-standard ssh port you need to specify it
- + ssh_port:
- +
- + # Git import/fetch timeout
- + git_timeout: 10800
- +
- + ## Git settings
- + # CAUTION!
- + # Use the default values unless you really know what you are doing
- + git:
- + bin_path: /opt/gitlab/embedded/bin/git
- +
- + monitoring:
- + # IP whitelist controlling access to monitoring endpoints
- + ip_whitelist:
- + - "127.0.0.0/8"
- + - "::1/128"
- + # Sidekiq exporter is webserver built in to Sidekiq to expose Prometheus metrics
- + sidekiq_exporter:
- + enabled: true
- + log_enabled: false
- + address: 127.0.0.1
- + port: 8082
- +
- + # Web exporter is webserver built in to Unicorn/Puma to expose Prometheus metrics
- + web_exporter:
- + enabled: false
- + address: 127.0.0.1
- + port: 8083
- +
- + shutdown:
- + blackout_seconds: 10
- +
- + ## Prometheus settings
- + # Do not modify these settings here. They should be modified in /etc/gitlab/gitlab.rb
- + # if you installed GitLab via Omnibus.
- + # If you installed from source, you need to install and configure Prometheus
- + # yourself, and then update the values here.
- + # https://docs.gitlab.com/ee/administration/monitoring/prometheus/
- + prometheus:
- + enabled: true
- + server_address: "localhost:9090"
- +
- + ## Consul settings
- + consul:
- + api_url: ""
- +
- + #
- + # 5. Extra customization
- + # ==========================
- +
- + extra:
- +
- +
- +
- + rack_attack:
- + git_basic_auth:
- +
- +
- +development:
- + <<: *base
- +
- +test:
- + <<: *base
- + gravatar:
- + enabled: true
- + gitlab:
- + host: localhost
- + port: 80
- +
- + # When you run tests we clone and setup gitlab-shell
- + # In order to setup it correctly you need to specify
- + # your system username you use to run GitLab
- + # user: YOUR_USERNAME
- + repositories:
- + storages:
- + default: { "path": "tmp/tests/repositories/" }
- + gitlab_shell:
- + path: tmp/tests/gitlab-shell/
- + hooks_path: tmp/tests/gitlab-shell/hooks/
- + issues_tracker:
- + redmine:
- + title: "Redmine"
- + project_url: "http://redmine/projects/:issues_tracker_id"
- + issues_url: "http://redmine/:project_id/:issues_tracker_id/:id"
- + new_issue_url: "http://redmine/projects/:issues_tracker_id/issues/new"
- + jira:
- + title: "JIRA"
- + url: https://samplecompany.example.net
- + project_key: PROJECT
- + ldap:
- + enabled: false
- + servers:
- + main:
- + label: ldap
- + host: 127.0.0.1
- + port: 3890
- + uid: 'uid'
- + method: 'plain' # "tls" or "ssl" or "plain"
- + base: 'dc=example,dc=com'
- + user_filter: ''
- + group_base: 'ou=groups,dc=example,dc=com'
- + admin_group: ''
- + sync_ssh_keys: false
- +
- +staging:
- + <<: *base
- - change mode from '' to '0640'
- - change owner from '' to 'root'
- - change group from '' to 'git'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/config/gitlab.yml to /var/opt/gitlab/gitlab-rails/etc/gitlab.yml] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/config/gitlab.yml to /var/opt/gitlab/gitlab-rails/etc/gitlab.yml
- * templatesymlink[Create a gitlab_workhorse_secret and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/gitlab_workhorse_secret] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/gitlab_workhorse_secret
- - update content in file /var/opt/gitlab/gitlab-rails/etc/gitlab_workhorse_secret from none to 900159
- - suppressed sensitive resource
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_workhorse_secret] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/.gitlab_workhorse_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_workhorse_secret
- * templatesymlink[Create a gitlab_shell_secret and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret
- - update content in file /var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret from none to c742f1
- - suppressed sensitive resource
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/.gitlab_shell_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/.gitlab_shell_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_shell_secret
- * templatesymlink[Create a gitlab_pages_secret and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/gitlab_pages_secret] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/gitlab_pages_secret
- - update content in file /var/opt/gitlab/gitlab-rails/etc/gitlab_pages_secret from none to 85129b
- - suppressed sensitive resource
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/.gitlab_pages_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_pages_secret] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/.gitlab_pages_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_pages_secret
- * templatesymlink[Create a gitlab_kas_secret and create a symlink to Rails root] action create
- * template[/var/opt/gitlab/gitlab-rails/etc/gitlab_kas_secret] action create
- - create new file /var/opt/gitlab/gitlab-rails/etc/gitlab_kas_secret
- - update content in file /var/opt/gitlab/gitlab-rails/etc/gitlab_kas_secret from none to 85e31f
- - suppressed sensitive resource
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * link[Link /opt/gitlab/embedded/service/gitlab-rails/.gitlab_kas_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_kas_secret] action create
- - unlink existing symlink to file at /opt/gitlab/embedded/service/gitlab-rails/.gitlab_kas_secret
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/.gitlab_kas_secret to /var/opt/gitlab/gitlab-rails/etc/gitlab_kas_secret
- * link[/opt/gitlab/embedded/service/gitlab-rails/config/initializers/relative_url.rb] action delete (up to date)
- * file[/var/opt/gitlab/gitlab-rails/etc/relative_url.rb] action delete (up to date)
- * env_dir[/opt/gitlab/etc/gitlab-rails/env] action create
- * directory[/opt/gitlab/etc/gitlab-rails/env] action create
- - create new directory /opt/gitlab/etc/gitlab-rails/env
- * file[/opt/gitlab/etc/gitlab-rails/env/HOME] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/HOME
- - update content in file /opt/gitlab/etc/gitlab-rails/env/HOME from none to 205bb9
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/RAILS_ENV] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/RAILS_ENV
- - update content in file /opt/gitlab/etc/gitlab-rails/env/RAILS_ENV from none to ab8e18
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/LD_PRELOAD] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/LD_PRELOAD
- - update content in file /opt/gitlab/etc/gitlab-rails/env/LD_PRELOAD from none to f79114
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/BUNDLE_GEMFILE] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/BUNDLE_GEMFILE
- - update content in file /opt/gitlab/etc/gitlab-rails/env/BUNDLE_GEMFILE from none to 28d586
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/SIDEKIQ_MEMORY_KILLER_MAX_RSS] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/SIDEKIQ_MEMORY_KILLER_MAX_RSS
- - update content in file /opt/gitlab/etc/gitlab-rails/env/SIDEKIQ_MEMORY_KILLER_MAX_RSS from none to dd80d7
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/PATH] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/PATH
- - update content in file /opt/gitlab/etc/gitlab-rails/env/PATH from none to d5dc07
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/ICU_DATA] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/ICU_DATA
- - update content in file /opt/gitlab/etc/gitlab-rails/env/ICU_DATA from none to a04260
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/PYTHONPATH] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/PYTHONPATH
- - update content in file /opt/gitlab/etc/gitlab-rails/env/PYTHONPATH from none to 98c9f4
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/EXECJS_RUNTIME] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/EXECJS_RUNTIME
- - update content in file /opt/gitlab/etc/gitlab-rails/env/EXECJS_RUNTIME from none to 75081b
- - suppressed sensitive resource
- * file[/opt/gitlab/etc/gitlab-rails/env/TZ] action create
- - create new file /opt/gitlab/etc/gitlab-rails/env/TZ
- - update content in file /opt/gitlab/etc/gitlab-rails/env/TZ from none to 983a95
- - suppressed sensitive resource
- * link[/opt/gitlab/embedded/service/gitlab-rails/tmp] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/tmp to /var/opt/gitlab/gitlab-rails/tmp
- * link[/opt/gitlab/embedded/service/gitlab-rails/public/uploads] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/public/uploads to /var/opt/gitlab/gitlab-rails/uploads
- * link[/opt/gitlab/embedded/service/gitlab-rails/log] action create
- - create symlink at /opt/gitlab/embedded/service/gitlab-rails/log to /var/log/gitlab/gitlab-rails
- * link[/var/log/gitlab/gitlab-rails/sidekiq.log] action delete (skipped due to only_if)
- * file[/opt/gitlab/embedded/service/gitlab-rails/db/structure.sql] action create
- - change owner from 'root' to 'git'
- * remote_file[/var/opt/gitlab/gitlab-rails/VERSION] action create/opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-15.17.4/lib/chef/provider/remote_file/local_file.rb:43: warning: URI.unescape is obsolete
- - create new file /var/opt/gitlab/gitlab-rails/VERSION
- - update content in file /var/opt/gitlab/gitlab-rails/VERSION from none to 391f4c
- --- /var/opt/gitlab/gitlab-rails/VERSION 2021-11-09 21:15:20.011500969 +0000
- +++ /var/opt/gitlab/gitlab-rails/.chef-VERSION20211109-12195-178b84o 2021-11-09 21:15:20.011500969 +0000
- @@ -1 +1,2 @@
- +14.4.2-ee
- * remote_file[/var/opt/gitlab/gitlab-rails/REVISION] action create/opt/gitlab/embedded/lib/ruby/gems/2.7.0/gems/chef-15.17.4/lib/chef/provider/remote_file/local_file.rb:43: warning: URI.unescape is obsolete
- - create new file /var/opt/gitlab/gitlab-rails/REVISION
- - update content in file /var/opt/gitlab/gitlab-rails/REVISION from none to 004aea
- --- /var/opt/gitlab/gitlab-rails/REVISION 2021-11-09 21:15:20.027500814 +0000
- +++ /var/opt/gitlab/gitlab-rails/.chef-REVISION20211109-12195-1ylrn87 2021-11-09 21:15:20.027500814 +0000
- @@ -1 +1,2 @@
- +84aa6daaffd
- * version_file[Create version file for Rails] action create
- * file[/var/opt/gitlab/gitlab-rails/RUBY_VERSION] action create
- - create new file /var/opt/gitlab/gitlab-rails/RUBY_VERSION
- - update content in file /var/opt/gitlab/gitlab-rails/RUBY_VERSION from none to a499eb
- --- /var/opt/gitlab/gitlab-rails/RUBY_VERSION 2021-11-09 21:15:20.079500317 +0000
- +++ /var/opt/gitlab/gitlab-rails/.chef-RUBY_VERSION20211109-12195-l7d8fi 2021-11-09 21:15:20.079500317 +0000
- @@ -1 +1,2 @@
- +ruby 2.7.4p191 (2021-07-07 revision a21a3b7d23) [x86_64-linux]
- * execute[clear the gitlab-rails cache] action nothing (skipped due to action :nothing)
- * file[/var/opt/gitlab/gitlab-rails/config.ru] action delete (up to date)
- Recipe: gitlab::selinux
- * bash[Set proper security context on ssh files for selinux] action nothing (skipped due to action :nothing)
- Recipe: gitlab::add_trusted_certs
- * directory[/etc/gitlab/trusted-certs] action create
- - create new directory /etc/gitlab/trusted-certs
- - change mode from '' to '0755'
- * directory[/opt/gitlab/embedded/ssl/certs] action create (up to date)
- * file[/opt/gitlab/embedded/ssl/certs/README] action create
- - create new file /opt/gitlab/embedded/ssl/certs/README
- - update content in file /opt/gitlab/embedded/ssl/certs/README from none to 623059
- --- /opt/gitlab/embedded/ssl/certs/README 2021-11-09 21:15:20.115499971 +0000
- +++ /opt/gitlab/embedded/ssl/certs/.chef-README20211109-12195-8rxww1 2021-11-09 21:15:20.111500009 +0000
- @@ -1 +1,4 @@
- +This directory is managed by omnibus-gitlab.
- + Any file placed in this directory will be ignored
- +. Place certificates in /etc/gitlab/trusted-certs.
- - change mode from '' to '0644'
- * ruby_block[Move existing certs and link to /opt/gitlab/embedded/ssl/certs] action run
- * Moving existing certificates found in /opt/gitlab/embedded/ssl/certs
- * Symlinking existing certificates found in /etc/gitlab/trusted-certs
- - execute the ruby block Move existing certs and link to /opt/gitlab/embedded/ssl/certs
- Recipe: gitlab::default
- * service[create a temporary puma service] action nothing (skipped due to action :nothing)
- * service[create a temporary sidekiq service] action nothing (skipped due to action :nothing)
- * service[create a temporary mailroom service] action nothing (skipped due to action :nothing)
- Recipe: package::runit_systemd
- * directory[/usr/lib/systemd/system] action create (up to date)
- * template[/usr/lib/systemd/system/gitlab-runsvdir.service] action create (up to date)
- * file[/etc/systemd/system/default.target.wants/gitlab-runsvdir.service] action delete (up to date)
- * file[/etc/systemd/system/basic.target.wants/gitlab-runsvdir.service] action delete (up to date)
- * execute[systemctl daemon-reload] action nothing (skipped due to action :nothing)
- * execute[systemctl enable gitlab-runsvdir] action nothing (skipped due to action :nothing)
- * execute[systemctl start gitlab-runsvdir] action nothing (skipped due to action :nothing)
- Recipe: package::sysctl
- * execute[reload all sysctl conf] action nothing (skipped due to action :nothing)
- Recipe: logrotate::folders_and_configs
- * directory[/var/opt/gitlab/logrotate] action create
- - create new directory /var/opt/gitlab/logrotate
- - change mode from '' to '0700'
- * directory[/var/opt/gitlab/logrotate/logrotate.d] action create
- - create new directory /var/opt/gitlab/logrotate/logrotate.d
- - change mode from '' to '0700'
- * directory[/var/log/gitlab/logrotate] action create
- - create new directory /var/log/gitlab/logrotate
- - change mode from '' to '0700'
- * template[/var/opt/gitlab/logrotate/logrotate.conf] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.conf
- - update content in file /var/opt/gitlab/logrotate/logrotate.conf from none to c1c320
- --- /var/opt/gitlab/logrotate/logrotate.conf 2021-11-09 21:15:20.219498974 +0000
- +++ /var/opt/gitlab/logrotate/.chef-logrotate20211109-12195-1kvnmdy.conf 2021-11-09 21:15:20.219498974 +0000
- @@ -1 +1,13 @@
- +# Generated by 'gitlab-ctl reconfigure'.
- +# Modifications will be overwritten!
- +
- +include /var/opt/gitlab/logrotate/logrotate.d/nginx
- +include /var/opt/gitlab/logrotate/logrotate.d/puma
- +include /var/opt/gitlab/logrotate/logrotate.d/gitlab-rails
- +include /var/opt/gitlab/logrotate/logrotate.d/gitlab-shell
- +include /var/opt/gitlab/logrotate/logrotate.d/gitlab-workhorse
- +include /var/opt/gitlab/logrotate/logrotate.d/gitlab-pages
- +include /var/opt/gitlab/logrotate/logrotate.d/gitlab-kas
- +include /var/opt/gitlab/logrotate/logrotate.d/gitaly
- +include /var/opt/gitlab/logrotate/logrotate.d/mailroom
- - change mode from '' to '0644'
- * template[/var/opt/gitlab/logrotate/logrotate.d/nginx] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/nginx
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/nginx from none to e17e19
- --- /var/opt/gitlab/logrotate/logrotate.d/nginx 2021-11-09 21:15:20.239498782 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-nginx20211109-12195-yw68ks 2021-11-09 21:15:20.239498782 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/nginx/*.log {
- + su root root
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- * template[/var/opt/gitlab/logrotate/logrotate.d/puma] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/puma
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/puma from none to 44ad27
- --- /var/opt/gitlab/logrotate/logrotate.d/puma 2021-11-09 21:15:20.255498628 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-puma20211109-12195-uw0lyf 2021-11-09 21:15:20.255498628 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/puma/*.log {
- + su git git
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-rails] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/gitlab-rails
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/gitlab-rails from none to 26254a
- --- /var/opt/gitlab/logrotate/logrotate.d/gitlab-rails 2021-11-09 21:15:20.271498475 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-gitlab-rails20211109-12195-qd1d1c 2021-11-09 21:15:20.271498475 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/gitlab-rails/*.log {
- + su git git
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-shell] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/gitlab-shell
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/gitlab-shell from none to 3a880d
- --- /var/opt/gitlab/logrotate/logrotate.d/gitlab-shell 2021-11-09 21:15:20.287498322 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-gitlab-shell20211109-12195-sbfykx 2021-11-09 21:15:20.287498322 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/gitlab-shell//*.log {
- + su git git
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-workhorse] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/gitlab-workhorse
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/gitlab-workhorse from none to 3453f6
- --- /var/opt/gitlab/logrotate/logrotate.d/gitlab-workhorse 2021-11-09 21:15:20.303498167 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-gitlab-workhorse20211109-12195-hy5f32 2021-11-09 21:15:20.303498167 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/gitlab-workhorse/*.log {
- + su git git
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-pages] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/gitlab-pages
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/gitlab-pages from none to 3c118a
- --- /var/opt/gitlab/logrotate/logrotate.d/gitlab-pages 2021-11-09 21:15:20.323497975 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-gitlab-pages20211109-12195-6omkpv 2021-11-09 21:15:20.323497975 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/gitlab-pages/*.log {
- + su git git
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- * template[/var/opt/gitlab/logrotate/logrotate.d/gitlab-kas] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/gitlab-kas
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/gitlab-kas from none to 0ba4f0
- --- /var/opt/gitlab/logrotate/logrotate.d/gitlab-kas 2021-11-09 21:15:20.339497822 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-gitlab-kas20211109-12195-12vy3vo 2021-11-09 21:15:20.339497822 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/gitlab-kas/*.log {
- + su git git
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- * template[/var/opt/gitlab/logrotate/logrotate.d/gitaly] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/gitaly
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/gitaly from none to 02bda7
- --- /var/opt/gitlab/logrotate/logrotate.d/gitaly 2021-11-09 21:15:20.355497670 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-gitaly20211109-12195-dl2t8k 2021-11-09 21:15:20.355497670 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/gitaly/*.log {
- + su git git
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- * template[/var/opt/gitlab/logrotate/logrotate.d/mailroom] action create
- - create new file /var/opt/gitlab/logrotate/logrotate.d/mailroom
- - update content in file /var/opt/gitlab/logrotate/logrotate.d/mailroom from none to 8fcea3
- --- /var/opt/gitlab/logrotate/logrotate.d/mailroom 2021-11-09 21:15:20.371497515 +0000
- +++ /var/opt/gitlab/logrotate/logrotate.d/.chef-mailroom20211109-12195-1fw11wz 2021-11-09 21:15:20.371497515 +0000
- @@ -1 +1,18 @@
- +# Generated by gitlab-ctl reconfigure
- +# Modifications will be overwritten!
- +
- +/var/log/gitlab/mailroom/*.log {
- + su git git
- + daily
- +
- +
- + rotate 30
- + compress
- + copytruncate
- + missingok
- + notifempty
- + postrotate
- +
- + endscript
- +}
- Recipe: logrotate::enable
- * service[logrotate] action nothing (skipped due to action :nothing)
- * runit_service[logrotate] action enable
- * ruby_block[restart_service] action nothing (skipped due to action :nothing)
- * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
- * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
- * directory[/opt/gitlab/sv/logrotate] action create
- - create new directory /opt/gitlab/sv/logrotate
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * template[/opt/gitlab/sv/logrotate/run] action create
- - create new file /opt/gitlab/sv/logrotate/run
- - update content in file /opt/gitlab/sv/logrotate/run from none to 07f1b6
- --- /opt/gitlab/sv/logrotate/run 2021-11-09 21:15:20.395497285 +0000
- +++ /opt/gitlab/sv/logrotate/.chef-run20211109-12195-wako1u 2021-11-09 21:15:20.395497285 +0000
- @@ -1 +1,11 @@
- +#!/bin/sh
- +exec 2>&1
- +
- +cd /var/opt/gitlab/logrotate
- +
- +exec /opt/gitlab/embedded/bin/chpst -P /usr/bin/env \
- + dir=/var/opt/gitlab/logrotate \
- + pre_sleep=600 \
- + post_sleep=3000 \
- + /opt/gitlab/embedded/bin/gitlab-logrotate-wrapper
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * directory[/opt/gitlab/sv/logrotate/log] action create
- - create new directory /opt/gitlab/sv/logrotate/log
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * directory[/opt/gitlab/sv/logrotate/log/main] action create
- - create new directory /opt/gitlab/sv/logrotate/log/main
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * template[/opt/gitlab/sv/logrotate/log/config] action create
- - create new file /opt/gitlab/sv/logrotate/log/config
- - update content in file /opt/gitlab/sv/logrotate/log/config from none to 623c00
- --- /opt/gitlab/sv/logrotate/log/config 2021-11-09 21:15:20.419497055 +0000
- +++ /opt/gitlab/sv/logrotate/log/.chef-config20211109-12195-jfd1ew 2021-11-09 21:15:20.419497055 +0000
- @@ -1 +1,7 @@
- +s209715200
- +n30
- +t86400
- +!gzip
- +
- +
- - change mode from '' to '0644'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * ruby_block[verify_chown_persisted_on_logrotate] action create
- - execute the ruby block verify_chown_persisted_on_logrotate
- * ruby_block[verify_chown_persisted_on_logrotate] action nothing (skipped due to action :nothing)
- * link[/var/log/gitlab/logrotate/config] action create
- - create symlink at /var/log/gitlab/logrotate/config to /opt/gitlab/sv/logrotate/log/config
- * template[/opt/gitlab/sv/logrotate/log/run] action create
- - create new file /opt/gitlab/sv/logrotate/log/run
- - update content in file /opt/gitlab/sv/logrotate/log/run from none to 94afe6
- --- /opt/gitlab/sv/logrotate/log/run 2021-11-09 21:15:20.435496902 +0000
- +++ /opt/gitlab/sv/logrotate/log/.chef-run20211109-12195-1tiagn3 2021-11-09 21:15:20.435496902 +0000
- @@ -1 +1,3 @@
- +#!/bin/sh
- +exec svlogd -tt /var/log/gitlab/logrotate
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * directory[/opt/gitlab/sv/logrotate/env] action create
- - create new directory /opt/gitlab/sv/logrotate/env
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * ruby_block[Delete unmanaged env files for logrotate service] action run (skipped due to only_if)
- * template[/opt/gitlab/sv/logrotate/check] action create (skipped due to only_if)
- * template[/opt/gitlab/sv/logrotate/finish] action create (skipped due to only_if)
- * directory[/opt/gitlab/sv/logrotate/control] action create
- - create new directory /opt/gitlab/sv/logrotate/control
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * template[/opt/gitlab/sv/logrotate/control/t] action create
- - create new file /opt/gitlab/sv/logrotate/control/t
- - update content in file /opt/gitlab/sv/logrotate/control/t from none to 8fa3fa
- --- /opt/gitlab/sv/logrotate/control/t 2021-11-09 21:15:20.459496672 +0000
- +++ /opt/gitlab/sv/logrotate/control/.chef-t20211109-12195-yvvyll 2021-11-09 21:15:20.459496672 +0000
- @@ -1 +1,4 @@
- +#!/bin/sh
- +echo "Received TERM from runit, sending to process group (-PID)"
- +kill -- -$(cat /opt/gitlab/service/logrotate/supervise/pid)
- - change mode from '' to '0755'
- - change owner from '' to 'root'
- - change group from '' to 'root'
- * link[/opt/gitlab/init/logrotate] action create
- - create symlink at /opt/gitlab/init/logrotate to /opt/gitlab/embedded/bin/sv
- * file[/opt/gitlab/sv/logrotate/down] action nothing (skipped due to action :nothing)
- * ruby_block[restart_service] action run (skipped due to only_if)
- * ruby_block[reload_log_service] action create
- * ruby_block[restart_service] action nothing (skipped due to action :nothing)
- * ruby_block[restart_log_service] action nothing (skipped due to action :nothing)
- * ruby_block[reload_log_service] action nothing (skipped due to action :nothing)
- * directory[/opt/gitlab/sv/logrotate] action create (up to date)
- * template[/opt/gitlab/sv/logrotate/run] action create (up to date)
- * directory[/opt/gitlab/sv/logrotate/log] action create (up to date)
- * directory[/opt/gitlab/sv/logrotate/log/main] action create (up to date)
- * template[/opt/gitlab/sv/logrotate/log/config] action create (up to date)
- * ruby_block[verify_chown_persisted_on_logrotate] action nothing (skipped due to action :nothing)
- * link[/var/log/gitlab/logrotate/config] action create (up to date)
- * template[/opt/gitlab/sv/logrotate/log/run] action create (up to date)
- * directory[/opt/gitlab/sv/logrotate/env] action create (up to date)
- * ruby_block[Delete unmanaged env files for logrotate service] action run (skipped due to only_if)
- * template[/opt/gitlab/sv/logrotate/check] action create (skipped due to only_if)
- * template[/opt/gitlab/sv/logrotate/finish] action create (skipped due to only_if)
- * directory[/opt/gitlab/sv/logrotate/control] action create (up to date)
- * template[/opt/gitlab/sv/logrotate/control/t] action create (up to date)
- * link[/opt/gitlab/init/logrotate] action create (up to date)
- * file[/opt/gitlab/sv/logrotate/down] action nothing (skipped due to action :nothing)
- * directory[/opt/gitlab/service] action create (up to date)
- * link[/opt/gitlab/service/logrotate] action create
- - create symlink at /opt/gitlab/service/logrotate to /opt/gitlab/sv/logrotate
- * ruby_block[wait for logrotate service socket] action run
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement