Skip to content

Pass dependency proxy credentials to runners

What does this MR do?

Pass dependency proxy credentials to runners

This is based on gitlab-runner#27302 (comment 479588632)

  • We can see lib/api/entities/job_request/response.rb is attaching credentials via:
  • app/models/ci/build.rb where it's creating credentials via:
  • lib/gitlab/ci/build/credentials/factory.rb

So in addition to Registry we can also provide DependencyProxy

Screenshots (strongly suggested)

Screen_Shot_2021-01-23_at_00.20.13

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

See gitlab-runner#27302 (closed)

Edited by Lin Jen-Shin

Merge request reports