Skip to content

WIP: Increase security mechanisms for specs that need the tunnel

Sofia Vistas requested to merge qa-tunnel-prep into master

What does this MR do?

In order to re-enable safely the QA Tunnel, we are ensuring new flows are in place before the specs run on the GitLab instance in the CI pipeline:

  • disable signups
  • change the root password to a secure tunnel password

Context: https://gitlab.com/gitlab-com/gl-security/security-operations/sirt/operations/-/issues/1060#note_426100103 (the first two points)

The creation of a parallel scenario for Tunnel (instead of Kubernetes) will help migrate and test iteratively the new approach

Edited by Sofia Vistas

Merge request reports