Update Ironbank

069c985f · bigbang bot · Ryan Garcia · 9996132c · 069c985f · 069c985f
Commit 069c985f authored 1 year ago by bigbang bot Committed by Ryan Garcia 1 year ago
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,26 @@

 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

+## [7.9.0-bb.0] (2024-02-20)
+
+### Changed (17 Changes)
+- Update GitLab to appVersion 16.9.0
+- Update chart version 7.9.0 
+- Update ironbank/gitlab/gitlab/gitlab-webservice from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter from v1.57.0 to 1.58.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/certificates from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitaly from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse from 16.8.1 to 16.9.0
+- Update registry1.dso.mil/ironbank/gitlab/gitlab/kubectl from 16.8.1 to 16.9.0
+
 ## [7.8.0-bb.2] - 2024-01-31
 ### Changed
 - Updated to Gluon 0.4.7

--- a/README.md
+++ b/README.md
 # gitlab

-![Version: 7.8.1-bb.2](https://img.shields.io/badge/Version-7.8.1--bb.2-informational?style=flat-square) ![AppVersion: v16.8.1](https://img.shields.io/badge/AppVersion-v16.8.1-informational?style=flat-square)
+![Version: 7.9.0-bb.0](https://img.shields.io/badge/Version-7.9.0--bb.0-informational?style=flat-square) ![AppVersion: 16.9.0](https://img.shields.io/badge/AppVersion-16.9.0-informational?style=flat-square)

 GitLab is the most comprehensive AI-powered DevSecOps Platform.

@@ -41,7 +41,7 @@ helm install gitlab chart/
 | global.image | object | `{}` |  |
 | global.pod.labels | object | `{}` |  |
 | global.edition | string | `"ee"` |  |
-| global.gitlabVersion | string | `"16.8.1"` |  |
+| global.gitlabVersion | string | `"16.9.0"` |  |
 | global.application.create | bool | `false` |  |
 | global.application.links | list | `[]` |  |
 | global.application.allowClusterRoles | bool | `true` |  |
@@ -346,7 +346,7 @@ helm install gitlab chart/
 | global.workhorse.tls.enabled | bool | `false` |  |
 | global.webservice.workerTimeout | int | `60` |  |
 | global.certificates.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/certificates"` |  |
-| global.certificates.image.tag | string | `"16.8.1"` |  |
+| global.certificates.image.tag | string | `"16.9.0"` |  |
 | global.certificates.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | global.certificates.init.securityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | global.certificates.init.securityContext.runAsUser | int | `65534` |  |
@@ -382,7 +382,7 @@ helm install gitlab chart/
 | global.certificates.customCAs[28].secret | string | `"ca-certs-dod-trust-anchors-self-signed"` |  |
 | global.certificates.customCAs[29].secret | string | `"ca-certs-eca"` |  |
 | global.kubectl.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/kubectl"` |  |
-| global.kubectl.image.tag | string | `"16.8.1"` |  |
+| global.kubectl.image.tag | string | `"16.9.0"` |  |
 | global.kubectl.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | global.kubectl.securityContext.runAsUser | int | `65534` |  |
 | global.kubectl.securityContext.fsGroup | int | `65534` |  |
@@ -656,7 +656,7 @@ helm install gitlab chart/
 | redis.metrics.enabled | bool | `true` |  |
 | redis.metrics.image.registry | string | `"registry1.dso.mil/ironbank/bitnami"` |  |
 | redis.metrics.image.repository | string | `"analytics/redis-exporter"` |  |
-| redis.metrics.image.tag | string | `"v1.57.0"` |  |
+| redis.metrics.image.tag | string | `"v1.58.0"` |  |
 | redis.metrics.image.pullSecrets | list | `[]` |  |
 | redis.metrics.resources.limits.cpu | string | `"250m"` |  |
 | redis.metrics.resources.limits.memory | string | `"256Mi"` |  |
@@ -713,7 +713,7 @@ helm install gitlab chart/
 | postgresql.resources.requests.memory | string | `"500Mi"` |  |
 | postgresql.image.registry | string | `"registry1.dso.mil"` |  |
 | postgresql.image.repository | string | `"ironbank/opensource/postgres/postgresql"` |  |
-| postgresql.image.tag | string | `"14.9"` |  |
+| postgresql.image.tag | string | `"15.6"` |  |
 | postgresql.image.pullSecrets[0] | string | `"private-registry"` |  |
 | postgresql.auth.username | string | `"gitlab"` |  |
 | postgresql.auth.password | string | `"bogus-satisfy-upgrade"` |  |
@@ -756,7 +756,7 @@ helm install gitlab chart/
 | registry.resources.requests.cpu | string | `"200m"` |  |
 | registry.resources.requests.memory | string | `"1024Mi"` |  |
 | registry.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry"` |  |
-| registry.image.tag | string | `"16.8.1"` |  |
+| registry.image.tag | string | `"16.9.0"` |  |
 | registry.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | registry.ingress.enabled | bool | `false` |  |
 | registry.metrics.enabled | bool | `true` |  |
@@ -812,7 +812,7 @@ helm install gitlab chart/
 | gitlab.toolbox.replicas | int | `1` |  |
 | gitlab.toolbox.antiAffinityLabels.matchLabels.app | string | `"gitaly"` |  |
 | gitlab.toolbox.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox"` |  |
-| gitlab.toolbox.image.tag | string | `"16.8.1"` |  |
+| gitlab.toolbox.image.tag | string | `"16.9.0"` |  |
 | gitlab.toolbox.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.toolbox.init.resources.requests.cpu | string | `"200m"` |  |
 | gitlab.toolbox.init.resources.requests.memory | string | `"200Mi"` |  |
@@ -848,7 +848,7 @@ helm install gitlab chart/
 | gitlab.gitlab-exporter.resources.requests.memory | string | `"200Mi"` |  |
 | gitlab.gitlab-exporter.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.gitlab-exporter.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter"` |  |
-| gitlab.gitlab-exporter.image.tag | string | `"16.8.1"` |  |
+| gitlab.gitlab-exporter.image.tag | string | `"16.9.0"` |  |
 | gitlab.gitlab-exporter.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.gitlab-exporter.metrics.enabled | bool | `true` |  |
 | gitlab.gitlab-exporter.metrics.port | int | `9168` |  |
@@ -870,7 +870,7 @@ helm install gitlab chart/
 | gitlab.migrations.resources.requests.cpu | string | `"500m"` |  |
 | gitlab.migrations.resources.requests.memory | string | `"1.5G"` |  |
 | gitlab.migrations.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox"` |  |
-| gitlab.migrations.image.tag | string | `"16.8.1"` |  |
+| gitlab.migrations.image.tag | string | `"16.9.0"` |  |
 | gitlab.migrations.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.migrations.securityContext.runAsUser | int | `1000` |  |
 | gitlab.migrations.securityContext.runAsGroup | int | `1000` |  |
@@ -894,14 +894,14 @@ helm install gitlab chart/
 | gitlab.webservice.resources.requests.cpu | string | `"600m"` |  |
 | gitlab.webservice.resources.requests.memory | string | `"2.5G"` |  |
 | gitlab.webservice.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice"` |  |
-| gitlab.webservice.image.tag | string | `"16.8.1"` |  |
+| gitlab.webservice.image.tag | string | `"16.9.0"` |  |
 | gitlab.webservice.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.webservice.workhorse.resources.limits.cpu | string | `"600m"` |  |
 | gitlab.webservice.workhorse.resources.limits.memory | string | `"2.5G"` |  |
 | gitlab.webservice.workhorse.resources.requests.cpu | string | `"600m"` |  |
 | gitlab.webservice.workhorse.resources.requests.memory | string | `"2.5G"` |  |
 | gitlab.webservice.workhorse.image | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse"` |  |
-| gitlab.webservice.workhorse.tag | string | `"16.8.1"` |  |
+| gitlab.webservice.workhorse.tag | string | `"16.9.0"` |  |
 | gitlab.webservice.workhorse.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.webservice.workhorse.metrics.enabled | bool | `true` |  |
 | gitlab.webservice.workhorse.metrics.serviceMonitor.enabled | bool | `true` |  |
@@ -911,7 +911,7 @@ helm install gitlab chart/
 | gitlab.webservice.metrics.port | int | `8083` |  |
 | gitlab.webservice.metrics.serviceMonitor.enabled | bool | `true` |  |
 | gitlab.sidekiq.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq"` |  |
-| gitlab.sidekiq.image.tag | string | `"16.8.1"` |  |
+| gitlab.sidekiq.image.tag | string | `"16.9.0"` |  |
 | gitlab.sidekiq.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.sidekiq.init.resources.limits.cpu | string | `"200m"` |  |
 | gitlab.sidekiq.init.resources.limits.memory | string | `"200Mi"` |  |
@@ -929,7 +929,7 @@ helm install gitlab chart/
 | gitlab.sidekiq.containerSecurityContext.runAsGroup | int | `1000` |  |
 | gitlab.sidekiq.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.gitaly.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitaly"` |  |
-| gitlab.gitaly.image.tag | string | `"16.8.1"` |  |
+| gitlab.gitaly.image.tag | string | `"16.9.0"` |  |
 | gitlab.gitaly.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.gitaly.init.resources.limits.cpu | string | `"200m"` |  |
 | gitlab.gitaly.init.resources.limits.memory | string | `"200Mi"` |  |
@@ -949,7 +949,7 @@ helm install gitlab chart/
 | gitlab.gitaly.containerSecurityContext.runAsGroup | int | `1000` |  |
 | gitlab.gitaly.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.gitlab-shell.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell"` |  |
-| gitlab.gitlab-shell.image.tag | string | `"16.8.1"` |  |
+| gitlab.gitlab-shell.image.tag | string | `"16.9.0"` |  |
 | gitlab.gitlab-shell.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.gitlab-shell.init.resources.limits.cpu | string | `"200m"` |  |
 | gitlab.gitlab-shell.init.resources.limits.memory | string | `"200Mi"` |  |
@@ -967,15 +967,15 @@ helm install gitlab chart/
 | gitlab.gitlab-shell.containerSecurityContext.runAsGroup | int | `1000` |  |
 | gitlab.gitlab-shell.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.mailroom.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-mailroom"` |  |
-| gitlab.mailroom.image.tag | string | `"16.8.1"` |  |
+| gitlab.mailroom.image.tag | string | `"16.9.0"` |  |
 | gitlab.mailroom.image.pullSecrets[0].name | string | `"private-registry"` |  |
 | gitlab.mailroom.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.gitlab-pages.service.customDomains.type | string | `"ClusterIP"` |  |
 | gitlab.gitlab-pages.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages"` |  |
-| gitlab.gitlab-pages.image.tag | string | `"16.8.1"` |  |
+| gitlab.gitlab-pages.image.tag | string | `"16.9.0"` |  |
 | gitlab.gitlab-pages.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | gitlab.praefect.image.repository | string | `"registry1.dso.mil/ironbank/gitlab/gitlab/gitaly"` |  |
-| gitlab.praefect.image.tag | string | `"16.8.1"` |  |
+| gitlab.praefect.image.tag | string | `"16.9.0"` |  |
 | gitlab.praefect.init.resources.limits.cpu | string | `"200m"` |  |
 | gitlab.praefect.init.resources.limits.memory | string | `"200Mi"` |  |
 | gitlab.praefect.init.resources.requests.cpu | string | `"200m"` |  |
@@ -989,7 +989,7 @@ helm install gitlab chart/
 | gitlab-zoekt.install | bool | `false` |  |
 | gitlab-zoekt.gateway.basicAuth.enabled | bool | `false` |  |
 | gitlab-zoekt.gateway.basicAuth.secretName | string | `"{{ include \"gitlab.zoekt.gateway.basicAuth.secretName\" $ }}"` |  |
-| gitlab-zoekt.indexer.internalApi.enabled | bool | `false` |  |
+| gitlab-zoekt.indexer.internalApi.enabled | bool | `true` |  |
 | gitlab-zoekt.indexer.internalApi.secretName | string | `"{{ include \"gitlab.zoekt.indexer.internalApi.secretName\" $ }}"` |  |
 | gitlab-zoekt.indexer.internalApi.secretKey | string | `"{{ include \"gitlab.zoekt.indexer.internalApi.secretKey\" $ }}"` |  |
 | gitlab-zoekt.indexer.internalApi.gitlabUrl | string | `"{{ include \"gitlab.zoekt.indexer.internalApi.gitlabUrl\" $ }}"` |  |

--- a/chart/.gitignore
+++ b/chart/.gitignore
@@ -10,3 +10,5 @@ gems
 build
 spec/examples.txt
 knapsack_rspec_report.json
+Chart.*.yaml
+ci.digests.test.yaml
--- a/chart/.gitlab-ci.yml
+++ b/chart/.gitlab-ci.yml
@@ -51,7 +51,7 @@ variables:
  DEBIAN_VERSION: bullseye
  RUBY_VERSION: "3.0"
  CI_TOOLS_VERSION: "4.22.0"
-  GITLAB_QA_VERSION: "13.1.0"
+  GITLAB_QA_VERSION: "14.0.2"
  # STRICT_VERSIONS is used in RSpecs to ensure exact version match for tools like "helm" and "kubectl"
  STRICT_VERSIONS: "true"
  KUBE_CRD_SCHEMA_URL: "https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/v3/apis__apiextensions.k8s.io__v1_openapi.json"
@@ -70,6 +70,7 @@ stages:
  - prepare
  - test
  - preflight
+  - approve-review-apps
  - prepare-review
  - review
  - staging
@@ -111,9 +112,6 @@ secret_detection:
 sast:
  needs: []
  before_script: []
-sast:
-  needs: []
-  before_script: []
 iac-sast:
  needs: []
  before_script: []
@@ -239,23 +237,6 @@ lint_package:
          cronJob:
            apiVersion: batch/v1

-pin_image_versions:
-  stage: prepare-review
-  script:
-    - apk add skopeo
-    - bash ./scripts/ci/pin_image_digests.sh
-  artifacts:
-    paths:
-      - ci.digests.yaml
-  rules:
-    # Rules from .stable
-    - if: '$PIPELINE_TYPE =~ /DEFAULT_BRANCH_PIPELINE$/'
-    # Rules from .review_template
-    - if: '$PIPELINE_TYPE =~ /MR_PIPELINE$/'
-    - if: '$PIPELINE_TYPE =~ /STABLE_BRANCH_PIPELINE$/'
-    - if: '$PIPELINE_TYPE =~ /FEATURE_BRANCH_PIPELINE$/'
-    - if: '$PIPELINE_TYPE == "QA_KNAPSACK_UPDATE_PIPELINE"'
-
 "Validate 1.26.8":
  extends: .kubeconform
  variables:
@@ -274,6 +255,37 @@ pin_image_versions:
    KUBE_VERSION: "1.28.3"
    HELM_SETTINGS: !reference ["Validate 1.25.7", variables, HELM_SETTINGS]

+approve_cluster_tests:
+  stage: approve-review-apps
+  image: alpine:latest
+  script: echo "Proceeding to tests in CI clusters..."
+  rules:
+    - if: '$PIPELINE_TYPE =~ /MR_PIPELINE$/'
+      when: manual
+    - if: '$PIPELINE_TYPE =~ /FEATURE_BRANCH_PIPELINE$/'
+      when: manual
+  needs:
+    - job: danger-review
+      optional: true
+
+pin_image_versions:
+  stage: prepare-review
+  script:
+    - apk add bats skopeo
+    - bats --verbose-run ./scripts/ci/pin_image_digests.bats
+    - bash ./scripts/ci/pin_image_digests.sh
+  artifacts:
+    paths:
+      - ci.digests.yaml
+  rules:
+    # Rules from .stable
+    - if: '$PIPELINE_TYPE =~ /DEFAULT_BRANCH_PIPELINE$/'
+    # Rules from .review_template
+    - if: '$PIPELINE_TYPE =~ /MR_PIPELINE$/'
+    - if: '$PIPELINE_TYPE =~ /STABLE_BRANCH_PIPELINE$/'
+    - if: '$PIPELINE_TYPE =~ /FEATURE_BRANCH_PIPELINE$/'
+    - if: '$PIPELINE_TYPE == "QA_KNAPSACK_UPDATE_PIPELINE"'
+
 .set_up_varfile_and_kubecontext:
  script:
    - mkdir -p $(dirname "${VARIABLES_FILE}")
@@ -306,9 +318,8 @@ pin_image_versions:
    - kubectl version
    - !reference [.set_up_namespace_secret_and_deploy, script]
    - restart_toolbox
-    - echo "export QA_ENVIRONMENT_URL=gitlab-$HOST_SUFFIX.$KUBE_INGRESS_BASE_DOMAIN" >> "${VARIABLES_FILE}"
+    - echo "export GITLAB_URL=gitlab-$HOST_SUFFIX.$KUBE_INGRESS_BASE_DOMAIN" >> "${VARIABLES_FILE}"
    - echo "export GITLAB_ROOT_DOMAIN=$CI_ENVIRONMENT_SLUG.$KUBE_INGRESS_BASE_DOMAIN"        >> "${VARIABLES_FILE}"
-    - echo "export GITLAB_URL=gitlab-$HOST_SUFFIX.$KUBE_INGRESS_BASE_DOMAIN"         >> "${VARIABLES_FILE}"
    - echo "export REGISTRY_URL=registry-$HOST_SUFFIX.$KUBE_INGRESS_BASE_DOMAIN"     >> "${VARIABLES_FILE}"
    - echo "export S3_ENDPOINT=https://minio-$HOST_SUFFIX.$KUBE_INGRESS_BASE_DOMAIN" >> "${VARIABLES_FILE}"
    - !reference [.get_qa_revision, script]
@@ -529,7 +540,7 @@ stop_review_eks:
    - !reference [.set_up_namespace_secret_and_deploy, script]
    - check_domain_ip
    - restart_toolbox
-    - echo "export QA_ENVIRONMENT_URL=gitlab.$KUBE_INGRESS_BASE_DOMAIN" >> "${VARIABLES_FILE}"
+    - echo "export GITLAB_URL=gitlab.$KUBE_INGRESS_BASE_DOMAIN" >> "${VARIABLES_FILE}"
    - echo "export GITLAB_ROOT_DOMAIN=$KUBE_INGRESS_BASE_DOMAIN"        >> "${VARIABLES_FILE}"
    - echo "export S3_ENDPOINT=https://minio.$KUBE_INGRESS_BASE_DOMAIN" >> "${VARIABLES_FILE}"
    - !reference [.get_qa_revision, script]
@@ -665,7 +676,7 @@ rubocop:

 # Perform documentation linting on Markdown files
 check_docs_markdown:
-  image: registry.gitlab.com/gitlab-org/gitlab-docs/lint-markdown:alpine-3.18-vale-2.29.6-markdownlint-0.37.0-markdownlint2-0.10.0
+  image: registry.gitlab.com/gitlab-org/gitlab-docs/lint-markdown:alpine-3.19-vale-3.0.7-markdownlint-0.39.0-markdownlint2-0.12.1
  stage: prepare
  cache: {}
  dependencies: []
@@ -674,7 +685,7 @@ check_docs_markdown:
    # Lint prose
    - vale --minAlertLevel error doc
    # Lint Markdown
-    - markdownlint-cli2-config .markdownlint.yml 'doc/**/*.md'
+    - markdownlint-cli2 'doc/**/*.md'
  rules:
    - if: '$PIPELINE_TYPE == "DOCS_PIPELINE"'
    - if: '$PIPELINE_TYPE =~ /MR_PIPELINE$/'
@@ -683,17 +694,22 @@ check_docs_markdown:

 # Perform link checks on published HTML files
 check_docs_links:
-  image: registry.gitlab.com/gitlab-org/gitlab-docs/lint-html:alpine-3.18-ruby-3.2.2-08fa6df8
+  image: registry.gitlab.com/gitlab-org/gitlab-docs/lint-html:alpine-3.19-ruby-3.2.3-eee6c4c0
  stage: prepare
  cache: {}
  dependencies: []
  before_script: []
  script:
-    - mv doc/ /tmp/gitlab-docs/content/charts
+    # Put documentation in location expected by nanoc and configured in nanoc.yaml. For more information, see:
+    # https://gitlab.com/gitlab-org/gitlab-docs/-/blob/eee6c4c03621ff13743828ad74a8f0e8b96dfe7c/nanoc.yaml#L43
+    - mkdir /tmp/charts-gitlab
+    - mv doc/ /tmp/charts-gitlab
    - cd /tmp/gitlab-docs
    # Build HTML from Markdown
    - make compile
    # Check the internal links and anchors (in parallel)
+    # Links from the home page aren't checked because they aren't rendered here. For information, see:
+    # https://gitlab.com/gitlab-org/gitlab-docs/-/blob/eee6c4c03621ff13743828ad74a8f0e8b96dfe7c/content/index.erb#L6
    - "parallel time bundle exec nanoc check ::: internal_links internal_anchors"
  rules:
    - if: '$PIPELINE_TYPE == "DOCS_PIPELINE"'
@@ -755,7 +771,7 @@ review-docs-cleanup:
 # ---------------------------------------------------------------------------

 .specs: &specs
-  image: registry.gitlab.com/gitlab-org/gitlab-build-images/debian-${DEBIAN_VERSION}-ruby-2.7.patched-golang-1.18-node-16.14-postgresql-11:git-2.33-lfs-2.9-chrome-109-yarn-1.22-graphicsmagick-1.3.36-kubectl-1.23-helm-3.5
+  image: registry.gitlab.com/gitlab-org/gitlab-build-images/debian-${DEBIAN_VERSION}-ruby-3.1.patched-golang-1.21-rust-1.73-node-18.17-postgresql-14:rubygems-3.4-git-2.36-lfs-2.9-chrome-120-yarn-1.22-graphicsmagick-1.3.36
  stage: specs
  services:
  - docker:${DOCKER_VERSION}-dind
@@ -949,7 +965,7 @@ production_specs_eks:
    - else
    -   QA_IMAGE="gitlab/gitlab-ee-qa:nightly" # this will default to use nightly https://gitlab.com/gitlab-org/gitlab-qa/-/blob/master/docs/what_tests_can_be_run.md#specifying-the-gitlab-version
    - fi;
-    - echo "Running - 'gitlab-qa Test::Instance::Any --qa-image $QA_IMAGE EE https://$QA_ENVIRONMENT_URL -- $TEST_SUITE'"
+    - echo "Running - 'gitlab-qa Test::Instance::Any --qa-image $QA_IMAGE EE https://$GITLAB_URL -- $TEST_SUITE'"
    - |
      SIGNUP_DISABLED=true \
      QA_DEBUG=true \
@@ -957,7 +973,7 @@ production_specs_eks:
      GITLAB_PASSWORD=$ROOT_PASSWORD \
      GITLAB_ADMIN_USERNAME=root \
      GITLAB_ADMIN_PASSWORD=$ROOT_PASSWORD \
-      gitlab-qa Test::Instance::Any --qa-image $QA_IMAGE EE https://$QA_ENVIRONMENT_URL -- $TEST_SUITE
+      gitlab-qa Test::Instance::Any --qa-image $QA_IMAGE EE https://$GITLAB_URL -- $TEST_SUITE
  artifacts:
    when: always
    expire_in: 7d

--- a/chart/.markdownlint-cli2.yaml
+++ b/chart/.markdownlint-cli2.yaml
+---
+# Base Markdownlint configuration
+# Extended Markdownlint configuration in doc/.markdownlint/
+# See https://github.com/DavidAnson/markdownlint/blob/main/doc/Rules.md for explanations of each rule
+config:
+  # First, set the default
+  default: true
+
+  # Per-rule settings in alphabetical order
+  code-block-style:                 # MD046
+    style: "fenced"
+  emphasis-style: false             # MD049
+  first-header-h1: true             # MD002
+  first-line-h1: false              # MD041
+  header-style:                     # MD003
+    style: "atx"
+  hr-style:                         # MD035
+    style: "---"
+  line-length: false                # MD013
+  link-fragments: false             # MD051
+  no-duplicate-heading:             # MD024
+    siblings_only: true
+  no-emphasis-as-heading: false     # MD036
+  no-inline-html: false             # MD033
+  no-trailing-punctuation:          # MD026
+    punctuation: ".,;:!。，；：！？"
+  no-trailing-spaces: false         # MD009
+  ol-prefix:                        # MD029
+    style: "one"
+  reference-links-images: false     # MD052
+  ul-style:                         # MD004
+    style: "dash"
+
+  # Keep this item last due to length
+  proper-names:                     # MD044
+    code_blocks: false
+    html_elements: false
+    names: [
+      "Akismet",
+      "Alertmanager",
+      "AlmaLinux",
+      "API",
+      "Asana",
+      "Auth0",
+      "Azure",
+      "Bamboo",
+      "Bitbucket",
+      "Bugzilla",
+      "CAS",
+      "CentOS",
+      "Consul",
+      "Debian",
+      "DevOps",
+      "Docker",
+      "DockerSlim",
+      "Elasticsearch",
+      "Facebook",
+      "fastlane",
+      "fluent-plugin-redis-slowlog",
+      "GDK",
+      "Geo",
+      "Git LFS",
+      "git-annex",
+      "git-credential-oauth",
+      "git-sizer",
+      "Git",
+      "Gitaly",
+      "GitHub",
+      "gitlab.vim",
+      "GitLab Geo",
+      "GitLab Monitor",
+      "GitLab Operator",
+      "GitLab Pages",
+      "GitLab Rails",
+      "GitLab Runner",
+      "GitLab Shell",
+      "GitLab Workhorse",
+      "GitLab",
+      "Gitleaks",
+      "Gmail",
+      "Google",
+      "Grafana",
+      "Gzip",
+      "Helm",
+      "HipChat",
+      "ID",
+      "IP",
+      "Ingress",
+      "jasmine-jquery",
+      "JavaScript",
+      "Jaeger",
+      "Jenkins",
+      "Jira",
+      "Jira Cloud",
+      "Jira Server",
+      "jQuery",
+      "JSON",
+      "JupyterHub",
+      "Karma",
+      "Kerberos",
+      "Knative",
+      "Kubernetes",
+      "LDAP",
+      "Let's Encrypt",
+      "Markdown",
+      "markdownlint",
+      "Mattermost",
+      "Microsoft",
+      "minikube",
+      "MinIO",
+      "ModSecurity",
+      "Neovim",
+      "NGINX Ingress",
+      "NGINX",
+      "OAuth",
+      "OAuth 2",
+      "OmniAuth",
+      "OpenID",
+      "OpenShift",
+      "PgBouncer",
+      "Postfix",
+      "PostgreSQL",
+      "PowerShell",
+      "Praefect",
+      "Prometheus",
+      "Puma",
+      "puma-worker-killer",
+      "Python",
+      "Rake",
+      "Redis",
+      "Redmine",
+      "reCAPTCHA",
+      "Ruby",
+      "runit",
+      "Salesforce",
+      "SAML",
+      "Sendmail",
+      "Sentry",
+      "Service Desk",
+      "Sidekiq",
+      "Shibboleth",
+      "Slack",
+      "SMTP",
+      "SpotBugs",
+      "SSH",
+      "Tiller",
+      "TOML",
+      "Trello",
+      "Trello Power-Ups",
+      "TypeScript",
+      "Twitter",
+      "Ubuntu",
+      "Ultra Auth",
+      "Unicorn",
+      "unicorn-worker-killer",
+      "URL",
+      "WebdriverIO",
+      "Workload Identity Pool",
+      "Workload Identity Provider",
+      "YAML",
+      "YouTrack"
+    ]
--- a/chart/.tool-versions
+++ b/chart/.tool-versions
@@ -4,4 +4,4 @@ helm 3.11.0
 stern 1.23.0
 yq 4.34.2
 gomplate v3.11.5
-vale 2.29.6
+vale 3.0.7
--- a/chart/CHANGELOG.md
+++ b/chart/CHANGELOG.md
@@ -2,6 +2,34 @@
 documentation](doc/development/changelog.md) for instructions on adding your own
 entry.

+## 7.9.0 (2024-02-14)
+
+### Added (2 changes)
+
+- [Add tests for image digest pinning functionality](gitlab-org/charts/gitlab@6fdc3995b978e789685cb62f7a8b6dade7a80a3d) ([merge request](gitlab-org/charts/gitlab!3571))
+- [GitLab Shell: make extended configuration of sshd_config](gitlab-org/charts/gitlab@0937f24254ac0135fbc68405a69159a8f4daf541) ([merge request](gitlab-org/charts/gitlab!3581))
+
+### Fixed (1 change)
+
+- [Fix kas redis secret mounting in init-etc-kas](gitlab-org/charts/gitlab@6f772f1a17d73b9308f300c25b8d4c7b7f3fd412) ([merge request](gitlab-org/charts/gitlab!3562))
+
+### Changed (8 changes)
+
+- [Update gitlab-org/charts/gitlab-runner from 0.61.1 to 0.61.2](gitlab-org/charts/gitlab@dc7602c13ccf0dabd6a189462c875c9834b705b5) ([merge request](gitlab-org/charts/gitlab!3622))
+- [Update gitlab-org/charts/gitlab-runner from 0.61.0 to 0.61.1](gitlab-org/charts/gitlab@cf7bdebf6a60c1b8a453bec52e56f3d334c99ad6) ([merge request](gitlab-org/charts/gitlab!3608))
+- [Update gitlab-org/container-registry from 3.88.0-gitlab to 3.88.1-gitlab](gitlab-org/charts/gitlab@93890826c8dc8f5b3e5653b225618f148e903ba2) ([merge request](gitlab-org/charts/gitlab!3601))
+- [Update gitlab-org/charts/gitlab-runner from 0.60.0 to 0.61.0](gitlab-org/charts/gitlab@8342d162d527301f29d9cfa05ffc041f46eac44f) ([merge request](gitlab-org/charts/gitlab!3574))
+- [Fix the Configmap for packObjectsCache for Gitaly](gitlab-org/charts/gitlab@13108db8ad997fcbcba6ca3bab623e0065cfde4b) by @Modjo85 ([merge request](gitlab-org/charts/gitlab!3565))
+- [Zoekt: Enable internalApi by default](gitlab-org/charts/gitlab@f2d5eed2a4ad8c2e66dc5ea21e68d48c9a31ab1e) ([merge request](gitlab-org/charts/gitlab!3572))
+- [Update gitlab-org/gitlab-exporter from 13.5.0 to 14.0.0](gitlab-org/charts/gitlab@6cedee72b82377bbea9ca4c915c4e9bd83d22a45) ([merge request](gitlab-org/charts/gitlab!3542))
+- [Update gitlab-org/gitlab-qa from 13.1.0 to 13.2.1](gitlab-org/charts/gitlab@8c970eb366b508ef20d30c6369a6aeee57fed149) ([merge request](gitlab-org/charts/gitlab!3573))
+
+## 7.8.2 (2024-02-07)
+
+### Changed (1 change)
+
+- [Update gitlab-org/charts/gitlab-runner from 0.60.0 to 0.61.0](gitlab-org/security/charts/gitlab@7d2d3c4d088a89ab953dc37aea7ec9b4333a63f2)
+
 ## 7.8.1 (2024-01-24)

 No changes.
@@ -28,6 +56,14 @@ No changes.

 - [Provide option to configure kas redis using global.redis.kas](gitlab-org/charts/gitlab@3e03a63726406922b39057c804d1d7d43508946f) ([merge request](gitlab-org/charts/gitlab!3544))

+## 7.7.5 (2024-02-07)
+
+No changes.
+
+## 7.7.4 (2024-01-24)
+
+No changes.
+
 ## 7.7.3 (2024-01-13)

 No changes.
@@ -64,6 +100,14 @@ No changes.

 - [Doc: FIPS Add note of UBI expectations for FIPS mode host](gitlab-org/charts/gitlab@4274d077ab7d6b08b9ac640182640b02ea22b4f7) ([merge request](gitlab-org/charts/gitlab!3487))

+## 7.6.7 (2024-02-07)
+
+No changes.
+
+## 7.6.6 (2024-01-24)
+
+No changes.
+
 ## 7.6.5 (2024-01-13)

 No changes.
@@ -111,6 +155,10 @@ No changes.

 - [Deprecate namespace in mailroom.yml](gitlab-org/charts/gitlab@781a94d070a5ae221c33f1a31fdd9ecde15f2be6) ([merge request](gitlab-org/charts/gitlab!3419))

+## 7.5.8 (2024-01-24)
+
+No changes.
+
 ## 7.5.7 (2024-01-13)

 No changes.

--- a/chart/Chart.yaml
+++ b/chart/Chart.yaml
 ---
 apiVersion: v1
 name: gitlab
-version: 7.8.1-bb.2
-appVersion: v16.8.1
+version: 7.9.0-bb.0
+appVersion: 16.9.0
 description: GitLab is the most comprehensive AI-powered DevSecOps Platform.
 keywords:
 - gitlab
@@ -15,38 +15,38 @@ maintainers:
  email: support@gitlab.com
 annotations:
  bigbang.dev/applicationVersions: |
-    - Gitlab: 16.8.1
+    - Gitlab: 16.9.0
  helm.sh/images: |
    - name: redis-exporter
      condition: redis.metrics.enabled
-      image: registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter:v1.57.0
+      image: registry1.dso.mil/ironbank/bitnami/analytics/redis-exporter:v1.58.0
    - name: redis
      condition: redis.install
      image: registry1.dso.mil/ironbank/bitnami/redis:7.0.0-debian-10-r3
    - name: alpine-certificates
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/certificates:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/certificates:16.9.0
    - name: cfssl-self-sign
      condition: shared-secrets.enabled
      image: registry1.dso.mil/ironbank/gitlab/gitlab/cfssl-self-sign:1.6.1
    - name: gitaly
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitaly:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitaly:16.9.0
    - name: gitlab-container-registry
      condition: registry.enabled
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-container-registry:16.9.0
    - name: gitlab-shell
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-shell:16.9.0
    - name: gitlab-sidekiq
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-sidekiq:16.9.0
    - name: gitlab-toolbox
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-toolbox:16.9.0
    - name: gitlab-webservice
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-webservice:16.9.0
    - name: gitlab-workhorse
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-workhorse:16.9.0
    - name: gitlab-pages
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-pages:16.9.0
    - name: kubectl
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/kubectl:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/kubectl:16.9.0
    - name: mc
      image: registry1.dso.mil/ironbank/opensource/minio/mc:RELEASE.2022-12-24T15-21-38Z
    - name: minio
@@ -59,7 +59,7 @@ annotations:
      image: registry1.dso.mil/ironbank/redhat/ubi/ubi9:9.3
    - name: gitlab-exporter
      condition: gitlab.gitlab-exporter.enabled
-      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter:16.8.1
+      image: registry1.dso.mil/ironbank/gitlab/gitlab/gitlab-exporter:16.9.0
    - name: bbtests
      condition: bbtests.enabled
      image: registry1.dso.mil/bigbang-ci/gitlab-tester:0.0.4
--- a/chart/Gemfile
+++ b/chart/Gemfile
@@ -6,14 +6,13 @@ group :test do
  gem 'rspec-parameterized', require: false
  gem 'aws-sdk-s3', '>= 1.120'
  gem 'capybara'
-  gem 'selenium-webdriver'
-  gem 'capybara-screenshot'
  gem 'docker-api'
  gem 'rake'
  gem 'hash-deep-merge'
  gem 'knapsack'
  gem 'tomlrb'
  gem 'fugit'
+  gem 'rest-client'
 end

 group :rubocop do

--- a/chart/Gemfile.lock
+++ b/chart/Gemfile.lock
@@ -37,7 +37,7 @@ GEM
    benchmark (0.2.1)
    binding_of_caller (1.0.0)
      debug_inspector (>= 0.0.1)
-    capybara (3.39.0)
+    capybara (3.39.2)
      addressable
      matrix
      mini_mime (>= 0.1.3)
@@ -46,10 +46,6 @@ GEM
      rack-test (>= 0.6.3)
      regexp_parser (>= 1.5, < 3.0)
      xpath (~> 3.2)
-    capybara-screenshot (1.0.22)
-      capybara (>= 1.0, < 4)
-      launchy
-    childprocess (3.0.0)
    claide (1.1.0)
    claide-plugins (0.9.2)
      cork
@@ -84,6 +80,7 @@ GEM
    docker-api (1.34.2)
      excon (>= 0.47.0)
      multi_json
+    domain_name (0.6.20240107)
    e2mmap (0.1.0)
    equalizer (0.0.11)
    et-orbi (1.2.7)
@@ -115,6 +112,9 @@ GEM
      rubocop-rails (~> 2.15)
      rubocop-rspec (~> 2.12)
    hash-deep-merge (0.1.1)
+    http-accept (1.7.0)
+    http-cookie (1.0.5)
+      domain_name (~> 0.5)
    httparty (0.21.0)
      mini_mime (>= 1.0.0)
      multi_xml (>= 0.5.2)
@@ -130,12 +130,13 @@ GEM
      rexml
    kramdown-parser-gfm (1.1.0)
      kramdown (~> 2.0)
-    launchy (2.4.3)
-      addressable (~> 2.3)
    matrix (0.4.2)
    memoizable (0.4.2)
      thread_safe (~> 0.3, >= 0.3.1)
    method_source (1.0.0)
+    mime-types (3.5.2)
+      mime-types-data (~> 3.2015)
+    mime-types-data (3.2023.1205)
    mini_mime (1.0.2)
    mini_portile2 (2.8.0)
    minitest (5.16.3)
@@ -149,6 +150,7 @@ GEM
    multi_json (1.13.1)
    multi_xml (0.6.0)
    nap (1.1.0)
+    netrc (0.11.0)
    no_proxy_fix (0.1.2)
    nokogiri (1.13.8)
      mini_portile2 (~> 2.8.0)
@@ -172,12 +174,17 @@ GEM
    raabro (1.4.0)
    racc (1.6.0)
    rack (3.0.0)
-    rack-test (2.0.2)
+    rack-test (2.1.0)
      rack (>= 1.3)
    rainbow (3.0.0)
    rake (13.0.1)
    rchardet (1.8.0)
    regexp_parser (1.8.2)
+    rest-client (2.1.0)
+      http-accept (>= 1.7.0, < 2.0)
+      http-cookie (>= 1.0.2, < 2.0)
+      mime-types (>= 1.16, < 4.0)
+      netrc (~> 0.8)
    reverse_markdown (2.1.1)
      nokogiri
    rexml (3.2.5)
@@ -234,13 +241,9 @@ GEM
      rubocop (~> 1.33)
    ruby-progressbar (1.11.0)
    ruby2_keywords (0.0.5)
-    rubyzip (2.3.0)
    sawyer (0.9.2)
      addressable (>= 2.3.5)
      faraday (>= 0.17.3, < 3)
-    selenium-webdriver (3.142.7)
-      childprocess (>= 0.5, < 4.0)
-      rubyzip (>= 1.2.2)
    solargraph (0.41.2)
      backport (~> 1.1)
      benchmark
@@ -286,7 +289,6 @@ PLATFORMS
 DEPENDENCIES
  aws-sdk-s3 (>= 1.120)
  capybara
-  capybara-screenshot
  docker-api
  fugit
  gitlab-dangerfiles (~> 3.12.0)
@@ -295,10 +297,10 @@ DEPENDENCIES
  knapsack
  pry
  rake
+  rest-client
  rspec
  rspec-parameterized
  rspec-retry
-  selenium-webdriver
  solargraph
  tomlrb


--- a/chart/Kptfile
+++ b/chart/Kptfile
@@ -5,7 +5,7 @@ metadata:
 upstream:
  type: git
  git:
-    commit: d0fe351ab79fc9c66278ac08849bad5c51abf5ad
+    commit: 15f8efe175c74a8144d2a6bb2367ef5b5947dd63
    repo: https://gitlab.com/gitlab-org/charts/gitlab
    directory: /
-    ref: v7.8.1
+    ref: v7.9.0
--- a/chart/charts/gitlab-runner-0.60.0.tgz
+++ b/chart/charts/gitlab-runner-0.60.0.tgz
--- a/chart/charts/gitlab-runner-0.61.2.tgz
+++ b/chart/charts/gitlab-runner-0.61.2.tgz
--- a/chart/charts/gitlab-zoekt-1.0.0.tgz
+++ b/chart/charts/gitlab-zoekt-1.0.0.tgz
--- a/chart/charts/gitlab-zoekt-1.0.1.tgz
+++ b/chart/charts/gitlab-zoekt-1.0.1.tgz
--- a/chart/charts/gitlab/charts/geo-logcursor/Chart.yaml
+++ b/chart/charts/gitlab/charts/geo-logcursor/Chart.yaml
 ---
 apiVersion: v1
 name: geo-logcursor
-version: 7.8.1
-appVersion: v16.8.1
+version: 7.9.0
+appVersion: v16.9.0
 description: GitLab Geo logcursor
 keywords:
 - gitlab

--- a/chart/charts/gitlab/charts/gitaly/Chart.yaml
+++ b/chart/charts/gitlab/charts/gitaly/Chart.yaml
 ---
 apiVersion: v1
 name: gitaly
-version: 7.8.1
-appVersion: 16.8.1
+version: 7.9.0
+appVersion: 16.9.0
 description: Git RPC service for handling all the git calls made by GitLab
 keywords:
 - gitlab

--- a/chart/charts/gitlab/charts/gitaly/templates/_configmap_spec.yaml
+++ b/chart/charts/gitlab/charts/gitaly/templates/_configmap_spec.yaml
@@ -161,7 +161,10 @@ data:
    dir = {{ .dir | quote }}
    {{-     end }}
    {{-     if .max_age }}
-    max_age = {{ .max_age }}
+    max_age = {{ .max_age | quote }}
+    {{-     end }}
+    {{-     if .min_occurrences }}
+    min_occurrences = {{ .min_occurrences }}
    {{-     end }}
    {{-   end }}
    {{- end }}
--- a/chart/charts/gitlab/charts/gitlab-exporter/Chart.yaml
+++ b/chart/charts/gitlab/charts/gitlab-exporter/Chart.yaml
 ---
 apiVersion: v1
 name: gitlab-exporter
-version: 7.8.1
-appVersion: 13.5.0
+version: 7.9.0
+appVersion: 14.2.0
 description: Exporter for GitLab Prometheus metrics (e.g. CI, pull mirrors)
 keywords:
 - gitlab

--- a/chart/charts/gitlab/charts/gitlab-pages/Chart.yaml
+++ b/chart/charts/gitlab/charts/gitlab-pages/Chart.yaml
 ---
 apiVersion: v1
 name: gitlab-pages
-version: 7.8.1
-appVersion: 16.8.1
+version: 7.9.0
+appVersion: 16.9.0
 description: Daemon for serving static websites from GitLab projects
 keywords:
 - gitlab