🤖 GitLab Bot 🤖 authored Aug 25, 2026 and Clemens Beck committed Aug 27, 2026

Changelog: changed

Backport: Update gitlab-runner to v0.92.1

See merge request !5295

Merged-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Nick Westbury <nwestbury@gitlab.com>
Co-authored-by: GitLab Renovate Bot <gitlab-bot@gitlab.com>

The shared secrets script didn't indent Rails secrets with multiple
active_record_encryption_primary_key or
active_record_encryption_deterministic_keys correctly.

By default those arrays have a single entry, but multiple entries
are valid e.g. when performing a secret rotation.

Changelog: fixed

Closes #6639

Backport 10.3: Fix indentation of active_record secret arrays

See merge request !5302

Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Stefan Bordei <sbordei@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Gitaly's init-cgroups container used gitlab.podSecurityContextRoot, a
Pod-level securityContext helper. This helper had privileged and
allowPrivilegeEscalation removed as invalid PodSecurityContext fields in
!4961, which
silently stripped them from init-cgroups too, breaking chown of the
cgroup path on clusters requiring them (e.g. OpenShift).

Add gitlab.containerSecurityContextRoot, a generic container-level
securityContext helper, use it for init-cgroups, and refactor existing
container securityContext helpers to share it. Remove the now-unused
gitlab.podSecurityContextRoot.

Changelog: fixed

Closes #6647

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Backport 10.3: Render privileged securityContext cgroups container

See merge request !5315

Merged-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Stefan Bordei <sbordei@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

[ci skip]

[ci skip]