Add Search and Filter options in Credentials Inventory
Problem to solve
Today a GitLab admin/group owner can leverage the Credentials Inventory to view and manage SSH keys, GPG keys, Personal Access Tokens, Project and Group Access tokens. As GitLab usage matures and the number of keys and token grows, it becomes increasingly difficult to manage and customize, surfacing the following issues:
- I cannot sort, filter, or search keys. This is problematic when admins need to revoke expired, compromised, or unused keys.
Intended users
User experience goal
When managing GitLab credentials, I want to be able find and sort keys from the Credentials Inventory view to easily assess and revoke keys and tokens. The same sort/filter options should be available for credentials inventory on both self-managed and GitLab.com.
Exploring options
| Filtered search | Dropdowns & segmented control |
|---|---|
 |
 |
Proposal
Allow users to do sorting and filtering on the following criteria:
- Owner
- Scope
- This should allow multiple selections to be made from the different scope options.
- Created date
- Expiration date
- Revoked date
- Last used date (implemented in Personal Access Token (PAT) Last Used IP Addres... (#428577 - closed))
For date filters, allow users to specify a start date, an end date, or both, to define a range of results to show.
Original request contents
We will add the following search/sorting functionality within the Credentials Inventory view:
- Search by "owner = $GITLAB_USER"
- Search by "scope = [api, read_user, read_api, read_repository, write_repository, read_registry, write_registry, sudo]"
- Search by "created_on [<,=,>] $DATE"
- Search by "expiration [<,=,>] $DATE"
- Search by "revoked [<,=,>] $DATE"
- Search by "last_used [<,=,>] $DATE"
- Sort by "last_used by [high, low]"
- Sort by "scope by [many, few]"
- Sort by "expiration by [close, far, expired]"
- Sort by "revoked by [close, far, $STATUS]"
Product Tier
Out of scope
- Changes to the "expiration" UI that are in the mocks - the icon and color showing whether a token is expired or not.
Note
This is a feature request for a strategic Ultimate prospect customer.
(Internal Only) Salesforce Opportunity Link: https://gitlab.my.salesforce.com/0064M00000Zs1tX
This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.