Skip to content

Audit successful GPG keys creation and removal

What does this MR do?

Audit successful GPG key creation and removal via app and API.

How to test

Via App

  1. Authenticated to the app as a user, and follow the steps to create and remove GPG Key
  2. Create https://docs.gitlab.com/ee/user/project/repository/gpg_signed_commits/#adding-a-gpg-key-to-your-account
  3. Remove https://docs.gitlab.com/ee/user/project/repository/gpg_signed_commits/#removing-a-gpg-key

Via API

  1. Authenticated to the RESTFul API, and follow the steps to create and remove GPG Key
  2. Create https://docs.gitlab.com/ee/api/users.html#add-a-gpg-key
  3. Remove https://docs.gitlab.com/ee/api/users.html#delete-ssh-key-for-current-user

Screenshots or Screencasts (strongly suggested)

Navigate to Admin Area > Monitoring > Audit Events and view the newly created audit events

Screen_Shot_2021-07-13_at_1.30.38_pm

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Related to #220127 (closed)

Edited by Tan Le

Merge request reports

Loading