Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove dead Ruby code | Nick Thomas | 2019-10-15 | 1 | -64/+0 |
| | |||||
* | Remove gitlab-keys script | Patrick Bajao | 2019-09-04 | 1 | -312/+0 |
| | |||||
* | Actually print matched keys in list_keys | Christian Ratzenhofer | 2019-04-30 | 1 | -8/+12 |
| | |||||
* | Revert "Merge branch 'sh-bump-ruby-version' into 'master'" | Douwe Maan | 2018-12-13 | 1 | -10/+4 |
| | | | This reverts merge request !257 | ||||
* | Upgrade to Ruby 2.5.3 | Stan Hu | 2018-12-13 | 1 | -4/+10 |
| | |||||
* | GitlabConfig, GitlabShell & GitlabKeys spec fixes | Ash McKenzie | 2018-09-07 | 1 | -1/+1 |
| | | | | GitlabConfig spec was relying upon real config.yml | ||||
* | Use `output` matcher in one test | Robert Speicher | 2018-08-15 | 1 | -4/+1 |
| | |||||
* | Autocorrect specs via `transpec -k its -v stub_with_hash` | Robert Speicher | 2018-08-15 | 1 | -36/+36 |
| | |||||
* | Revert "Merge branch 'ash.mckenzie/srp-refactor' into 'master'" | Nick Thomas | 2018-08-14 | 1 | -37/+38 |
| | | | | | This reverts commit 3aaf4751e09262c53544a1987f59b1308af9b6c1, reversing changes made to c6577e0d75f51b017f2f332838b97c3ca5b497c0. | ||||
* | Merge remote-tracking branch 'origin/master' into ash.mckenzie/srp-refactor | Ash McKenzie | 2018-08-01 | 1 | -3/+31 |
|\ | |||||
| * | Add support for SSH certificate authentication | Ævar Arnfjörð Bjarmason | 2018-07-26 | 1 | -2/+30 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This along with the code submitted to gitlab-ce in the gitlab-org/gitlab-ce! MR implements SSH certificate authentication. See the docs added to gitlab-ce for why and how to enable this. This, along with that MR, closes gitlab-org/gitlab-ce#3457 Implementation notes: - Because it's easy to do, and because an earlier nascent version of this would pass user-ID to gitlab-shell, that's now supported, even though the SSH certificate authentication uses username-USERNAME. - The astute reader will notice that not all the API calls in gitlab-ce's lib/api/internal.rb support a "username" argument, some only support "user_id". There's a few reasons for this: a) For this to be efficient, I am bending over backwards to avoid extra API calls when using SSH certificates. Therefore the /allowed API call will now return a "user id" to us if we're allowed to proceed further. This is then fed to existing APIs that would only be called after a successful call to /allowed. b) Not all of the git-shell codepaths go through /internal/allowed, or ever deal with a repository, e.g. the argument-less "Welcome to GitLab", and /internal/2fa_recovery_codes. These need to use /internal/discover to figure out details about the user, so support looking that up by username. c) Once we have the "user id", the GL_ID gets passed down to e.g. user-authored hooks. I don't want to have those all break by having to handle a third GL_ID mode of "username" in addition to the current "key id" and "user id". | ||||
* | | Fix some rspec deprecations | Ash McKenzie | 2018-08-01 | 1 | -40/+39 |
|/ | |||||
* | Rspec upgrade and deprecation fixesash.mckenzie/minor-tidy-up | Ash McKenzie | 2018-07-20 | 1 | -4/+4 |
| | |||||
* | Switch to structured logging | Jacob Vosmaer (GitLab) | 2018-03-19 | 1 | -5/+5 |
| | |||||
* | Ensure rm-key works with only ID | Michael Kozono | 2017-06-28 | 1 | -0/+17 |
| | |||||
* | Add list-key-ids command | Michael Kozono | 2017-06-28 | 1 | -2/+28 |
| | |||||
* | Instrument GitLab Shell and log metrics data to a file | Paco Guzman | 2016-10-11 | 1 | -2/+2 |
| | |||||
* | In order to use chomp! on the input later, we need to dup the ARGV input ↵dup-frozen-argv-key | DJ Mountney | 2016-08-10 | 1 | -1/+1 |
| | | | | | | string for keys Also updated the gitlab_key tests to freeze the ARGV variables. | ||||
* | Update the keys permission check to open the file in write mode. | DJ Mountney | 2016-08-10 | 1 | -0/+7 |
| | | | | That way the file is created if it does not exist. | ||||
* | Newline after "let"key-validations | Jacob Vosmaer | 2016-08-10 | 1 | -0/+1 |
| | |||||
* | Changes proposed during review | Jacob Vosmaer | 2016-08-10 | 1 | -2/+2 |
| | |||||
* | Defense in depth for authorized_keys lines | Jacob Vosmaer | 2016-08-05 | 1 | -0/+26 |
| | |||||
* | Add permission check tests, improve checkauthorized-keys-permission-check | Jacob Vosmaer | 2016-08-03 | 1 | -1/+20 |
| | |||||
* | Manage authorized_keys permissions continuouslykeys-chmod | Jacob Vosmaer | 2016-08-01 | 1 | -1/+1 |
| | | | | | | We can lazily create authorized_keys and set its permissions. This adds negligible overhead and it allows us to remove a setup step from GitLab both on source and in omnibus-gitlab. | ||||
* | Remove keys from authorized_keys in-place | Jacob Vosmaer | 2015-07-16 | 1 | -3/+5 |
| | | | | | | This will speed up the rm-key operation. The downside is that authorized_keys will not shrink when you remove a key. If this ever becomes a problem it can be fixed by running 'rake gitlab:shell:setup'. | ||||
* | Added list-keys command and spec | David Martin | 2014-10-15 | 1 | -0/+13 |
| | | | | | | | | | | | | | | | | | | Removed puts and tidied up regex Address the hound Address the hound, again Use single quotes Add back travis.yml file Remove travis.yml, only keep on fh-master Use single quotes Use single quotes | ||||
* | Improve coverage. | Gabor Nagy | 2014-06-23 | 1 | -0/+20 |
| | |||||
* | Create keys fixtures in test | Dmitriy Zaporozhets | 2014-05-31 | 1 | -0/+1 |
| | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
* | Put authorized_keys.lock in the .ssh directory | Jacob Vosmaer | 2014-05-30 | 1 | -1/+12 |
| | |||||
* | Use lock file when add or remove keys from authorized_keys file | Dmitriy Zaporozhets | 2014-04-18 | 1 | -0/+36 |
| | | | | | | This prevents concurrent modification of authorized_keys file Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
* | Add gitlab-keys batch-add-keys | Jacob Vosmaer | 2014-03-14 | 1 | -0/+42 |
| | | | | | This command is intended to be called by the GitLab Rails code when restoring an application backup. | ||||
* | Stub file writing in tests | Jacob Vosmaer | 2013-11-25 | 1 | -6/+11 |
| | |||||
* | Fix return values in GitlabKeys | Jacob Vosmaer | 2013-11-20 | 1 | -4/+23 |
| | |||||
* | Refactor file writing tests | Jacob Vosmaer | 2013-11-20 | 1 | -33/+34 |
| | |||||
* | More file writing tests for GitlabKeys | Jacob Vosmaer | 2013-11-05 | 1 | -27/+33 |
| | |||||
* | Remove sed invocation from GitlabKeys | Jacob Vosmaer | 2013-11-02 | 1 | -5/+10 |
| | |||||
* | Use Kernel#open to append lines to authorized_keys | Jacob Vosmaer | 2013-10-31 | 1 | -2/+5 |
| | |||||
* | Use Tempfile instead of `sed -i` | Jacob Vosmaer | 2013-07-19 | 1 | -1/+4 |
| | | | | | | The syntax for `sed -i` is incompatible between GNU sed and BSD sed. By Tempfile from the Ruby standard library we can avoid using the `-i` option of sed. | ||||
* | Use :warn instead of :error for invalid commands. | ash | 2013-05-18 | 1 | -2/+2 |
| | |||||
* | Add logging specs for gitlab-keys. | ash | 2013-05-17 | 1 | -0/+21 |
| | |||||
* | Fix tests and version up to 1.4.0v1.4.0 | Dmitriy Zaporozhets | 2013-04-30 | 1 | -1/+1 |
| | |||||
* | test GitlabKeys exec | Dmitriy Zaporozhets | 2013-03-11 | 1 | -19/+35 |
| | |||||
* | fix keys tests | Dmitriy Zaporozhets | 2013-02-09 | 1 | -1/+1 |
| | |||||
* | Updated with #{} | Michael | 2013-02-07 | 1 | -2/+2 |
| | |||||
* | Read auth keys file from config | Michael | 2013-02-07 | 1 | -2/+2 |
| | |||||
* | Fix key remove | Dmitriy Zaporozhets | 2013-02-05 | 1 | -1/+1 |
| | |||||
* | add/remove keys by id | Dmitriy Zaporozhets | 2013-02-05 | 1 | -6/+6 |
| | |||||
* | gitlab-init | Dmitriy Zaporozhets | 2013-02-05 | 1 | -1/+1 |
| | |||||
* | gitlab-keys with tests | Dmitriy Zaporozhets | 2013-02-05 | 1 | -0/+47 |