summaryrefslogtreecommitdiff
path: root/doc/ci/runners
diff options
context:
space:
mode:
authorTomasz Maczukin <tomasz@maczukin.pl>2018-04-11 00:03:26 +0200
committerTomasz Maczukin <tomasz@maczukin.pl>2018-04-24 13:57:50 +0200
commit9b221e98e6fc191747a25d24af136a157948d645 (patch)
tree500d5bbbfb9ad7ba45257c2f36b501ea5ea4abf4 /doc/ci/runners
parentf5524d554bce7028f410f51b5fef85641a5f0216 (diff)
downloadgitlab-ce-9b221e98e6fc191747a25d24af136a157948d645.tar.gz
Add documentation about resetting the runner registration token
Diffstat (limited to 'doc/ci/runners')
-rw-r--r--doc/ci/runners/README.md22
1 files changed, 22 insertions, 0 deletions
diff --git a/doc/ci/runners/README.md b/doc/ci/runners/README.md
index 60dc2ef9ac5..821413900fd 100644
--- a/doc/ci/runners/README.md
+++ b/doc/ci/runners/README.md
@@ -298,6 +298,28 @@ Mentioned briefly earlier, but the following things of Runners can be exploited.
We're always looking for contributions that can mitigate these
[Security Considerations](https://docs.gitlab.com/runner/security/).
+### Resetting the registration token for a Project
+
+If you think that registration token for a Project was revealed, you should
+reset them. It's recommended because such token can be used to register another
+Runner to thi Project. It may be next used to obtain the values of secret
+variables or clone the project code, that normally may be unavailable for the
+attacker.
+
+To reset the token:
+
+1. Go to **Settings > CI/CD** for a specified Project
+1. Expand the **General pipelines settings** section
+1. Find the **Runner token** form field and click the **Reveal value** button
+1. Delete the value and save the form
+1. After the page is refreshed, expand the **Runners settings** section
+ and check the registration token - it should be changed
+
+From now on the old token is not valid anymore and will not allow to register
+a new Runner to the project. If you are using any tools to provision and
+register new Runners, you should now update the token that is used to the
+new value.
+
## Determining the IP address of a Runner
> [Introduced](https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/17286) in GitLab 10.6.