ciSecureFiles Object Storage configuration does not work
Summary
When deploying the chart with global.appConfig.object_store
configured and global.appConfig.ciSecureFiles
enabled, CI Secure Files are stored ephemerally on the webservice pod and not uploaded to the configured bucket.
Steps to reproduce
- Configure
object_store
and enableciSecureFiles
while defining a bucket for ci-secure-files. - Upload a CI Secure File for a project.
Configuration used
(Please provide a sanitized version of the configuration used wrapped in a code block (```yaml))
global:
appConfig:
ciSecureFiles:
bucket: ci-secure-files
enabled: true
object_store:
connection:
key: key
secret: gitlab-object-storage-key
enabled: true
Current behavior
The CI Secure Files don't get uploaded to the configured bucket.
There are also no error logs. If you connect to the webservice container in the webservice pod, you can see that the files are being stored under /srv/gitlab/shared/ci_secure_files
.
Another test you can do to confirm these are stored locally is to kill the pod and once a new pod is running try to access the secured file. You will get an internal service error.
Expected behavior
CI Secure Files get uploaded to the configured bucket and not stored locally.
Versions
- Chart: 6.11.7
- Platform:
- Cloud: EKS
- Kubernetes: (
kubectl version
)- Client: v1.27.2
- Server: v1.24.13
- Helm: (
helm version
)- Client: v3.12.0
Relevant logs
N/A