Skip to content

Audit successful GPG keys creation and removal

Tan Le requested to merge 220127-audit-gpg-keys-create into master

What does this MR do?

Audit successful GPG key creation and removal via app and API.

How to test

Via App

  1. Authenticated to the app as a user, and follow the steps to create and remove GPG Key
  2. Create https://docs.gitlab.com/ee/user/project/repository/gpg_signed_commits/#adding-a-gpg-key-to-your-account
  3. Remove https://docs.gitlab.com/ee/user/project/repository/gpg_signed_commits/#removing-a-gpg-key

Via API

  1. Authenticated to the RESTFul API, and follow the steps to create and remove GPG Key
  2. Create https://docs.gitlab.com/ee/api/users.html#add-a-gpg-key
  3. Remove https://docs.gitlab.com/ee/api/users.html#delete-ssh-key-for-current-user

Screenshots or Screencasts (strongly suggested)

Navigate to Admin Area > Monitoring > Audit Events and view the newly created audit events

Screen_Shot_2021-07-13_at_1.30.38_pm

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Related to #220127 (closed)

Edited by Tan Le

Merge request reports