Skip to content

Determine which application settings aren't exposed in the admin UI

Background

In https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/13956 we're discussing UX changes to highlight application settings in the admin UI where the values have diverged from the defaults.

In order to accomplish this, all relevant settings need to be exposed in the admin UI.

Proposal

  • Determine which application settings aren't exposed yet in the admin UI.
  • Check which of the missing settings would make sense to expose, and which ones are only used internally.
    • e.g. cached_markdown_version wouldn't make sense to expose.
  • Create follow-up issues for each group of related settings, and assign them to the responsible team.

Current list of settings

The current (2021-08-10) list of columns in application_settings is (excluding id, created_at, updated_at, *_iv, *_html):

Setting Exposed in UI?
abuse_notification_email app/views/admin/application_settings/_abuse.html.haml
admin_mode app/views/admin/application_settings/_signin.html.haml
after_sign_out_path app/views/admin/application_settings/_signin.html.haml
after_sign_up_text app/views/admin/application_settings/_signin.html.haml
akismet_enabled app/views/admin/application_settings/_spam.html.haml
allow_group_owners_to_manage_ldap ee/app/views/admin/application_settings/_ldap_access_setting.html.haml
allow_local_requests_from_system_hooks app/views/admin/application_settings/_outbound.html.haml
allow_local_requests_from_web_hooks_and_services app/views/admin/application_settings/_outbound.html.haml
archive_builds_in_seconds
asset_proxy_enabled
asset_proxy_url
asset_proxy_whitelist
authorized_keys_enabled app/views/admin/application_settings/_performance.html.haml
auto_devops_domain app/views/admin/application_settings/_ci_cd.html.haml
auto_devops_enabled app/views/admin/application_settings/_ci_cd.html.haml
automatic_purchased_storage_allocation
cached_markdown_version
check_namespace_plan ee/app/views/admin/application_settings/_availability_on_namespace_setting.html.haml
cloud_license_enabled
commit_email_hostname app/views/admin/application_settings/_email.html.haml
compliance_frameworks
container_expiration_policies_enable_historic_entries app/views/admin/application_settings/_registry.html.haml
container_registry_cleanup_tags_service_max_list_size app/views/admin/application_settings/_registry.html.haml
container_registry_delete_tags_service_timeout app/views/admin/application_settings/_registry.html.haml
container_registry_expiration_policies_worker_capacity app/views/admin/application_settings/_registry.html.haml
container_registry_features
container_registry_token_expire_delay app/views/admin/application_settings/_registry.html.haml
container_registry_vendor
container_registry_version
custom_http_clone_url_root app/views/admin/application_settings/_visibility_and_access.html.haml
custom_project_templates_group_id ee/app/views/admin/application_settings/_custom_templates_form.html.haml
deactivate_dormant_users app/views/admin/application_settings/_account_and_limit.html.haml
default_artifacts_expire_in app/views/admin/application_settings/_ci_cd.html.haml
default_branch_name app/views/admin/application_settings/_initial_branch_name.html.haml
default_branch_protection
default_ci_config_path app/views/admin/application_settings/_ci_cd.html.haml
default_group_visibility app/views/admin/application_settings/_visibility_and_access.html.haml
default_project_creation app/views/admin/application_settings/_visibility_and_access.html.haml, ee/app/views/admin/application_settings/_project_creation_level.html.haml
default_project_deletion_protection ee/app/views/admin/application_settings/_default_project_deletion_protection_setting.html.haml
default_projects_limit app/views/admin/application_settings/_account_and_limit.html.haml
default_project_visibility app/views/admin/application_settings/_visibility_and_access.html.haml
default_snippet_visibility app/views/admin/application_settings/_visibility_and_access.html.haml
delayed_project_removal
deletion_adjourned_period ee/app/views/admin/application_settings/_default_project_deletion_adjourned_period_setting.html.haml
diff_max_files app/views/admin/application_settings/_diff_limits.html.haml
diff_max_lines app/views/admin/application_settings/_diff_limits.html.haml
diff_max_patch_bytes app/views/admin/application_settings/_diff_limits.html.haml
disabled_oauth_sign_in_sources
disable_feed_token app/views/admin/application_settings/_visibility_and_access.html.haml
disable_overriding_approvers_per_merge_request ee/app/views/admin/push_rules/_merge_request_approvals_fields.html.haml
dns_rebinding_protection_enabled app/views/admin/application_settings/_outbound.html.haml
domain_allowlist app/views/admin/application_settings/_signup.html.haml
domain_denylist app/views/admin/application_settings/_signup.html.haml
domain_denylist_enabled app/views/admin/application_settings/_signup.html.haml
dsa_key_restriction
ecdsa_key_restriction
ed25519_key_restriction
eks_access_key_id app/views/admin/application_settings/_eks.html.haml
eks_account_id app/views/admin/application_settings/_eks.html.haml
eks_integration_enabled app/views/admin/application_settings/_eks.html.haml
elasticsearch_analyzers_kuromoji_enabled ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_analyzers_kuromoji_search ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_analyzers_smartcn_enabled ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_analyzers_smartcn_search ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_aws ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_aws_access_key ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_aws_region ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_client_request_timeout ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_indexed_field_length_limit ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_indexed_file_size_limit_kb ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_indexing ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_limit_indexing ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_max_bulk_concurrency ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_max_bulk_size_mb ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_pause_indexing ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_replicas ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_search ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_shards ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_url ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
elasticsearch_username ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
email_additional_text ee/app/views/admin/application_settings/_email_additional_text_setting.html.haml
email_author_in_body app/views/admin/application_settings/_email.html.haml
email_restrictions app/views/admin/application_settings/_signup.html.haml
email_restrictions_enabled app/views/admin/application_settings/_signup.html.haml
enabled_git_access_protocol app/views/admin/application_settings/_visibility_and_access.html.haml
encrypted_akismet_api_key app/views/admin/application_settings/_spam.html.haml
encrypted_asset_proxy_secret_key
encrypted_ci_jwt_signing_key
encrypted_cloud_license_auth_token
encrypted_customers_dot_jwt_signing_key
encrypted_eks_secret_access_key app/views/admin/application_settings/_eks.html.haml
encrypted_elasticsearch_aws_secret_access_key ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
encrypted_elasticsearch_password ee/app/views/admin/application_settings/_elasticsearch_form.html.haml
encrypted_external_auth_client_key app/views/admin/application_settings/_external_authorization_service_form.html.haml
encrypted_external_auth_client_key_pass app/views/admin/application_settings/_external_authorization_service_form.html.haml
encrypted_external_pipeline_validation_service_token
encrypted_lets_encrypt_private_key
encrypted_mailgun_signing_key app/views/admin/application_settings/_mailgun.html.haml
encrypted_recaptcha_private_key app/views/admin/application_settings/_spam.html.haml
encrypted_recaptcha_site_key app/views/admin/application_settings/_spam.html.haml
encrypted_secret_detection_token_revocation_token
encrypted_slack_app_secret ee/app/views/admin/application_settings/_slack.html.haml
encrypted_slack_app_verification_token ee/app/views/admin/application_settings/_slack.html.haml
encrypted_spam_check_api_key app/views/admin/application_settings/_spam.html.haml
enforce_namespace_storage_limit
enforce_pat_expiration ee/app/views/admin/application_settings/_enforce_pat_expiration.html.haml
enforce_ssh_key_expiration ee/app/views/admin/application_settings/_enforce_ssh_key_expiration.html.haml
enforce_terms app/views/admin/application_settings/_terms.html.haml
external_auth_client_cert app/views/admin/application_settings/_external_authorization_service_form.html.haml
external_authorization_service_default_label app/views/admin/application_settings/_external_authorization_service_form.html.haml
external_authorization_service_enabled app/views/admin/application_settings/_external_authorization_service_form.html.haml
external_authorization_service_timeout app/views/admin/application_settings/_external_authorization_service_form.html.haml
external_authorization_service_url app/views/admin/application_settings/_external_authorization_service_form.html.haml
external_pipeline_validation_service_timeout
external_pipeline_validation_service_url
file_template_project_id ee/app/views/admin/application_settings/_templates.html.haml
first_day_of_week app/views/admin/application_settings/_localization.html.haml
floc_enabled app/views/admin/application_settings/_floc.html.haml
force_pages_access_control app/views/admin/application_settings/_pages.html.haml
geo_node_allowed_ips
geo_status_timeout
gitaly_timeout_default app/views/admin/application_settings/_gitaly.html.haml
gitaly_timeout_fast app/views/admin/application_settings/_gitaly.html.haml
gitaly_timeout_medium app/views/admin/application_settings/_gitaly.html.haml
gitpod_enabled app/views/admin/application_settings/_gitpod.html.haml
gitpod_url app/views/admin/application_settings/_gitpod.html.haml
git_two_factor_session_expiry ee/app/views/admin/application_settings/_git_two_factor_session_expiry.html.haml
grafana_enabled app/views/admin/application_settings/_grafana.html.haml
grafana_url app/views/admin/application_settings/_grafana.html.haml
gravatar_enabled app/views/admin/application_settings/_account_and_limit.html.haml
group_download_export_limit app/views/admin/application_settings/_import_export_limits.html.haml
group_export_limit app/views/admin/application_settings/_import_export_limits.html.haml
group_import_limit app/views/admin/application_settings/_import_export_limits.html.haml
group_owners_can_manage_default_branch_protection ee/app/views/admin/application_settings/_group_owners_can_manage_default_branch_protection_setting.html.haml
hashed_storage_enabled app/views/admin/application_settings/_repository_storage.html.haml
health_check_access_token
help_page_documentation_base_url app/views/admin/application_settings/_help_page.html.haml
help_page_hide_commercial_content app/views/admin/application_settings/_help_page.html.haml
help_page_support_url app/views/admin/application_settings/_help_page.html.haml
help_page_text app/views/admin/application_settings/_help_page.html.haml
help_text ee/app/views/admin/application_settings/_help_text_setting.haml
hide_third_party_offers app/views/admin/application_settings/_third_party_offers.html.haml
home_page_url app/views/admin/application_settings/_signin.html.haml
housekeeping_bitmaps_enabled app/views/admin/application_settings/_repository_check.html.haml
housekeeping_enabled app/views/admin/application_settings/_repository_check.html.haml
housekeeping_full_repack_period app/views/admin/application_settings/_repository_check.html.haml
housekeeping_gc_period app/views/admin/application_settings/_repository_check.html.haml
housekeeping_incremental_repack_period app/views/admin/application_settings/_repository_check.html.haml
html_emails_enabled app/views/admin/application_settings/_email.html.haml
import_sources app/views/admin/application_settings/_visibility_and_access.html.haml
in_product_marketing_emails_enabled app/views/admin/application_settings/_email.html.haml
instance_administration_project_id
instance_administrators_group_id
invisible_captcha_enabled app/views/admin/application_settings/_spam.html.haml
issues_create_limit app/views/admin/application_settings/_issue_limits.html.haml
keep_latest_artifact app/views/admin/application_settings/_ci_cd.html.haml
kroki_enabled app/views/admin/application_settings/_kroki.html.haml
kroki_formats app/views/admin/application_settings/_kroki.html.haml
kroki_url app/views/admin/application_settings/_kroki.html.haml
lets_encrypt_notification_email app/views/admin/application_settings/_pages.html.haml
lets_encrypt_terms_of_service_accepted app/views/admin/application_settings/_pages.html.haml
license_trial_ends_on
local_markdown_version
lock_delayed_project_removal
lock_memberships_to_ldap ee/app/views/admin/application_settings/_ldap_access_setting.html.haml
login_recaptcha_protection_enabled app/views/admin/application_settings/_spam.html.haml
mailgun_events_enabled app/views/admin/application_settings/_mailgun.html.haml
maintenance_mode ee/app/views/admin/application_settings/_maintenance_mode_settings_form.html.haml
maintenance_mode_message ee/app/views/admin/application_settings/_maintenance_mode_settings_form.html.haml
max_artifacts_size app/views/admin/application_settings/_ci_cd.html.haml
max_attachment_size app/views/admin/application_settings/_account_and_limit.html.haml
max_import_size app/views/admin/application_settings/_account_and_limit.html.haml
max_pages_size app/views/admin/application_settings/_pages.html.haml
max_personal_access_token_lifetime ee/app/views/admin/application_settings/_personal_access_token_expiration_policy.html.haml
metrics_enabled app/views/admin/application_settings/_prometheus.html.haml
metrics_host
metrics_method_call_threshold app/views/admin/application_settings/_prometheus.html.haml
metrics_packet_size
metrics_pool_size
metrics_port
metrics_sample_interval
metrics_timeout
minimum_password_length app/views/admin/application_settings/_signup.html.haml
mirror_available app/views/admin/application_settings/_repository_mirrors_form.html.haml
mirror_capacity_threshold ee/app/views/admin/application_settings/_mirror_settings.html.haml
mirror_max_capacity ee/app/views/admin/application_settings/_mirror_settings.html.haml
mirror_max_delay ee/app/views/admin/application_settings/_mirror_settings.html.haml
new_user_signups_cap app/views/admin/application_settings/_signup.html.haml
notes_create_limit app/views/admin/application_settings/_note_limits.html.haml
notes_create_limit_allowlist app/views/admin/application_settings/_note_limits.html.haml
notify_on_unknown_sign_in app/views/admin/application_settings/_signin.html.haml
npm_package_requests_forwarding ee/app/views/admin/application_settings/_ee_package_registry.haml
outbound_local_requests_whitelist
pages_domain_verification_enabled app/views/admin/application_settings/_pages.html.haml
password_authentication_enabled_for_git app/views/admin/application_settings/_signin.html.haml
password_authentication_enabled_for_web app/views/admin/application_settings/_signin.html.haml
performance_bar_allowed_group_id
personal_access_token_prefix app/views/admin/application_settings/_account_and_limit.html.haml
plantuml_enabled app/views/admin/application_settings/_plantuml.html.haml
plantuml_url app/views/admin/application_settings/_plantuml.html.haml
polling_interval_multiplier app/views/admin/application_settings/_realtime.html.haml
prevent_merge_requests_author_approval ee/app/views/admin/push_rules/_merge_request_approvals_fields.html.haml
prevent_merge_requests_committers_approval ee/app/views/admin/push_rules/_merge_request_approvals_fields.html.haml
productivity_analytics_start_date
project_download_export_limit app/views/admin/application_settings/_import_export_limits.html.haml
project_export_enabled app/views/admin/application_settings/_visibility_and_access.html.haml
project_export_limit app/views/admin/application_settings/_import_export_limits.html.haml
project_import_limit app/views/admin/application_settings/_import_export_limits.html.haml
prometheus_metrics_enabled app/views/admin/application_settings/_prometheus.html.haml
protected_ci_variables app/views/admin/application_settings/_ci_cd.html.haml
protected_paths app/views/admin/application_settings/_protected_paths.html.haml
pseudonymizer_enabled ee/app/views/admin/application_settings/_pseudonymizer.html.haml
push_event_activities_limit app/views/admin/application_settings/_performance.html.haml
push_event_hooks_limit app/views/admin/application_settings/_performance.html.haml
push_rule_id app/views/admin/application_settings/_ip_limits.html.haml
rate_limiting_response_text app/views/admin/application_settings/_ip_limits.html.haml
raw_blob_request_limit app/views/admin/application_settings/_performance.html.haml
recaptcha_enabled app/views/admin/application_settings/_spam.html.haml
receive_max_input_size app/views/admin/application_settings/_account_and_limit.html.haml
repository_checks_enabled app/views/admin/application_settings/_repository_check.html.haml
repository_size_limit ee/app/views/admin/application_settings/_repository_size_limit_setting.html.haml
repository_storages
repository_storages_weighted app/views/admin/application_settings/_repository_storage.html.haml
require_admin_approval_after_user_signup app/views/admin/application_settings/_signup.html.haml
required_instance_ci_template ee/app/views/admin/application_settings/_required_instance_ci_setting.html.haml
require_two_factor_authentication app/views/admin/application_settings/_signin.html.haml
restricted_visibility_levels app/views/admin/application_settings/_visibility_and_access.html.haml
rsa_key_restriction
runners_registration_token app/views/admin/runners/index.html.haml
runners_registration_token_encrypted
seat_link_enabled
secret_detection_revocation_token_types_url
secret_detection_token_revocation_enabled
secret_detection_token_revocation_url
send_user_confirmation_email app/views/admin/application_settings/_signup.html.haml
session_expire_delay app/views/admin/application_settings/_account_and_limit.html.haml
shared_runners_enabled app/views/admin/application_settings/_ci_cd.html.haml
shared_runners_minutes ee/app/views/admin/application_settings/_shared_runners_minutes_setting.html.haml
shared_runners_text app/views/admin/application_settings/_ci_cd.html.haml
sign_in_text app/views/admin/application_settings/_signin.html.haml
signup_enabled app/views/admin/application_settings/_signup.html.haml
slack_app_enabled ee/app/views/admin/application_settings/_slack.html.haml
slack_app_id ee/app/views/admin/application_settings/_slack.html.haml
snippet_size_limit
snowplow_app_id app/views/admin/application_settings/_snowplow.html.haml
snowplow_collector_hostname app/views/admin/application_settings/_snowplow.html.haml
snowplow_cookie_domain app/views/admin/application_settings/_snowplow.html.haml
snowplow_enabled app/views/admin/application_settings/_snowplow.html.haml
sourcegraph_enabled app/views/admin/application_settings/_sourcegraph.html.haml
sourcegraph_public_only app/views/admin/application_settings/_sourcegraph.html.haml
sourcegraph_url app/views/admin/application_settings/_sourcegraph.html.haml
spam_check_endpoint_enabled app/views/admin/application_settings/_spam.html.haml
spam_check_endpoint_url app/views/admin/application_settings/_spam.html.haml
static_objects_external_storage_auth_token app/views/admin/application_settings/_repository_static_objects.html.haml
static_objects_external_storage_url app/views/admin/application_settings/_repository_static_objects.html.haml
terminal_max_session_time app/views/admin/application_settings/_terminal.html.haml
throttle_authenticated_api_enabled app/views/admin/application_settings/_ip_limits.html.haml
throttle_authenticated_api_period_in_seconds app/views/admin/application_settings/_ip_limits.html.haml
throttle_authenticated_api_requests_per_period app/views/admin/application_settings/_ip_limits.html.haml
throttle_authenticated_packages_api_enabled app/views/admin/application_settings/_ip_limits.html.haml
throttle_authenticated_packages_api_period_in_seconds app/views/admin/application_settings/_ip_limits.html.haml
throttle_authenticated_packages_api_requests_per_period app/views/admin/application_settings/_ip_limits.html.haml
throttle_authenticated_web_enabled app/views/admin/application_settings/_ip_limits.html.haml
throttle_authenticated_web_period_in_seconds app/views/admin/application_settings/_ip_limits.html.haml
throttle_authenticated_web_requests_per_period app/views/admin/application_settings/_ip_limits.html.haml
throttle_incident_management_notification_enabled ee/app/views/admin/application_settings/_network_incident_management.html.haml
throttle_incident_management_notification_period_in_seconds ee/app/views/admin/application_settings/_network_incident_management.html.haml
throttle_incident_management_notification_per_period ee/app/views/admin/application_settings/_network_incident_management.html.haml
throttle_protected_paths_enabled app/views/admin/application_settings/_protected_paths.html.haml
throttle_protected_paths_period_in_seconds app/views/admin/application_settings/_protected_paths.html.haml
throttle_protected_paths_requests_per_period app/views/admin/application_settings/_protected_paths.html.haml
throttle_unauthenticated_enabled app/views/admin/application_settings/_ip_limits.html.haml
throttle_unauthenticated_packages_api_enabled app/views/admin/application_settings/_package_registry_limits.html.haml
throttle_unauthenticated_packages_api_period_in_seconds app/views/admin/application_settings/_package_registry_limits.html.haml
throttle_unauthenticated_packages_api_requests_per_period app/views/admin/application_settings/_package_registry_limits.html.haml
throttle_unauthenticated_period_in_seconds app/views/admin/application_settings/_ip_limits.html.haml
throttle_unauthenticated_requests_per_period app/views/admin/application_settings/_ip_limits.html.haml
time_tracking_limit_to_hours app/views/admin/application_settings/_localization.html.haml
two_factor_grace_period app/views/admin/application_settings/_signin.html.haml
unique_ips_limit_enabled app/views/admin/application_settings/_spam.html.haml
unique_ips_limit_per_user app/views/admin/application_settings/_spam.html.haml
unique_ips_limit_time_window app/views/admin/application_settings/_spam.html.haml
updating_name_disabled_for_users ee/app/views/admin/application_settings/_updating_name_disabled_for_users.html.haml
usage_ping_enabled app/views/admin/application_settings/_usage.html.haml
usage_ping_features_enabled app/views/admin/application_settings/_usage.html.haml
usage_stats_set_by_user_id
user_default_external app/views/admin/application_settings/_account_and_limit.html.haml
user_default_internal_regex app/views/admin/application_settings/_account_and_limit.html.haml
user_oauth_applications app/views/admin/application_settings/_account_and_limit.html.haml
user_show_add_ssh_key_message app/views/admin/application_settings/_account_and_limit.html.haml
uuid
valid_runner_registrars app/views/admin/application_settings/_runner_registrars_form.html.haml
version_check_enabled app/views/admin/application_settings/_usage.html.haml
web_ide_clientside_preview_enabled app/views/admin/application_settings/general.html.haml
whats_new_variant app/views/admin/application_settings/_whats_new.html.haml
wiki_page_max_content_bytes

Missing settings

Setting Expose in UI? Responsible group
archive_builds_in_seconds
asset_proxy_enabled
asset_proxy_url
asset_proxy_whitelist
automatic_purchased_storage_allocation
cached_markdown_version
cloud_license_enabled
compliance_frameworks
container_registry_features
container_registry_vendor
container_registry_version
default_branch_protection
delayed_project_removal
disabled_oauth_sign_in_sources
dsa_key_restriction
ecdsa_key_restriction
ed25519_key_restriction
encrypted_asset_proxy_secret_key
encrypted_ci_jwt_signing_key
encrypted_cloud_license_auth_token
encrypted_customers_dot_jwt_signing_key
encrypted_external_pipeline_validation_service_token
encrypted_lets_encrypt_private_key
encrypted_secret_detection_token_revocation_token
enforce_namespace_storage_limit
external_pipeline_validation_service_timeout
external_pipeline_validation_service_url
geo_node_allowed_ips
geo_status_timeout
health_check_access_token
instance_administration_project_id
instance_administrators_group_id
license_trial_ends_on
local_markdown_version
lock_delayed_project_removal
metrics_host
metrics_packet_size
metrics_pool_size
metrics_port
metrics_sample_interval
metrics_timeout
outbound_local_requests_whitelist
performance_bar_allowed_group_id
productivity_analytics_start_date
repository_storages
rsa_key_restriction
runners_registration_token_encrypted
seat_link_enabled
secret_detection_revocation_token_types_url
secret_detection_token_revocation_enabled
secret_detection_token_revocation_url
snippet_size_limit
usage_stats_set_by_user_id
uuid
wiki_page_max_content_bytes