summaryrefslogtreecommitdiff
path: root/lib/gitlab/background_migration/models/encrypt_columns/settings.rb
blob: 08ae35c067191216845699d29b0391c7748cf805 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
# frozen_string_literal: true

module Gitlab
  module BackgroundMigration
    module Models
      module EncryptColumns
        # This model is shared between synchronous and background migrations to
        # encrypt the `runners_token` column in `application_settings` table.
        #
        class Settings < ActiveRecord::Base
          include ::EachBatch
          include ::CacheableAttributes

          self.table_name = 'application_settings'
          self.inheritance_column = :_type_disabled

          after_commit do
            ::ApplicationSetting.expire
          end

          def runners_registration_token=(value)
            self.runners_registration_token_encrypted =
              ::Gitlab::CryptoHelper.aes256_gcm_encrypt(value)
          end

          def self.encrypted_attributes
            {
              runners_registration_token: {
                attribute: :runners_registration_token_encrypted
              }
            }
          end
        end
      end
    end
  end
end