Periodic admin email report
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Dev: https://dev.gitlab.org/gitlab/gitlab-ee/issues/297
I (Jacob) built a small periodic reporting script that runs from a cron job, telling me who are the admin users on dev.gitlab.org and gitlab.com. The idea is to be reminded of removing admins.
jacobvosmaer@theo:~$ cat /opt/gitlab-server/bin/gitlab-admin-check
#!/bin/sh
#
# Generated by Chef for theo.gitlab.com. Manual changes will be
# overwritten!
/opt/gitlab/bin/gitlab-rails runner 'puts "GitLab admins on #{Gitlab.config.gitlab.host}:" ; puts User.admins.pluck(:email)
If we want to offer this as a feature to users it should probably be a Sidetiq job: works better for clusters, and can be controlled from the gitlab admin panel more nicely than cron.
Jacob
An intermediate solution would be to create a rake task thad admins can put in a cron job, which would replace the wrapper script I pasted above. dzaporozhets do you think this would be a useful feature? It has 1 user ATM (me :)).
Dmitriy
since it has already 1 user it worth to put this into rake task :) If you have more information to put into report - we can organize this into Security report feature with UI in admin area.
Jacob
rake gitlab:security_report
cc/ @sytses @dzaporozhets