Skip to content

Resolve "IP whitelisting for Geo-enabling functionality in the primary"

What does this MR do?

Currently, Geo user authentication, file and repository synchronization works by having the secondary connect to the primary with privileged functionality, mostly mediated via JSON web tokens. However, we allow those connections to come from any IP in the world. By this MR we add the ability to specify allowed IP and CIDRs.

Backport MR https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/26930

What are the relevant issue numbers?

https://gitlab.com/gitlab-org/gitlab-ee/issues/4193

Does this MR meet the acceptance criteria?

Closes #4193 (closed)

Edited by Valery Sizov

Merge request reports