Add latest changes from gitlab-org/gitlab@master

6 files changed, 98 insertions, 0 deletions

diff --git a/data/deprecations/15-8-deprecate-auto-deploy-postgres-enabled.yml b/data/deprecations/15-8-deprecate-auto-deploy-postgres-enabled.yml
new file mode 100644
index 00000000000..048ae337924
--- /dev/null
+++ b/data/deprecations/15-8-deprecate-auto-deploy-postgres-enabled.yml
@@ -0,0 +1,16 @@
+- title: "Auto DevOps no longer provisions a PostgreSQL database by default"
+  announcement_milestone: "15.8"
+  removal_milestone: "16.0"
+  breaking_change: true
+  reporter: tigerwnz
+  stage: Configure
+  issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/343988
+  body: |
+    Currently, Auto DevOps provisions an in-cluster PostgreSQL database by default.
+    In GitLab 16.0, databases will be provisioned only for users who opt in. This
+    change supports production deployments that require more robust database management.
+
+    If you want Auto DevOps to provision an in-cluster database,
+    set the `POSTGRES_ENABLED` CI/CD variable to `true`.
+  tiers: [Core, Premium, Ultimate]
+  documentation_url: https://docs.gitlab.com/ee/topics/autodevops/stages.html#auto-deploy
diff --git a/data/deprecations/15-8-deprecate-herokuish.yml b/data/deprecations/15-8-deprecate-herokuish.yml
new file mode 100644
index 00000000000..78155095764
--- /dev/null
+++ b/data/deprecations/15-8-deprecate-herokuish.yml
@@ -0,0 +1,12 @@
+- title: "Auto DevOps support for Herokuish is deprecated"
+  announcement_milestone: "15.8"
+  removal_milestone: "17.0"
+  breaking_change: true
+  reporter: nagyv-gitlab
+  stage: configure
+  issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/211643
+  body: |
+    Auto DevOps support for Herokuish is deprecated in favor of [Cloud Native Buildpacks](https://docs.gitlab.com/ee/topics/autodevops/stages.html#auto-build-using-cloud-native-buildpacks). You should [migrate your builds from Herokuish to Cloud Native Buildpacks](https://docs.gitlab.com/ee/topics/autodevops/stages.html#moving-from-herokuish-to-cloud-native-buildpacks). From GitLab 14.0, Auto Build uses Cloud Native Buildpacks by default.
+
+    Because Cloud Native Buildpacks do not support automatic testing, the Auto Test feature of Auto DevOps is also deprecated.
+  documentation_url: https://docs.gitlab.com/ee/topics/autodevops/stages.html#auto-build-using-cloud-native-buildpacks
diff --git a/data/deprecations/15-8-redis-localhost.yml b/data/deprecations/15-8-redis-localhost.yml
new file mode 100644
index 00000000000..b18fcdc4318
--- /dev/null
+++ b/data/deprecations/15-8-redis-localhost.yml
@@ -0,0 +1,16 @@
+- title: "Non-standard default Redis ports are deprecated"
+  announcement_milestone: "15.8"
+  removal_milestone: "16.0"
+  breaking_change: true
+  reporter: jacobvosmaer-gitlab
+  stage: platforms  # (required) String value of the stage that the feature was created in. e.g., Growth
+  issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/388269
+  body: |
+    If GitLab starts without any Redis configuration file present,
+    GitLab assumes it can connect to three Redis servers at `localhost:6380`,
+    `localhost:6381` and `localhost:6382`. We are changing this behavior
+    so GitLab assumes there is one Redis server at `localhost:6379`.
+
+    Administrators who want to keep the three servers must configure
+    the Redis URLs by editing the `config/redis.cache.yml`,`config/redis.queues.yml`
+    and `config/redis.shared_state.yml` files.
diff --git a/data/deprecations/15-8-revoked-agent-tokens-api-change.yml b/data/deprecations/15-8-revoked-agent-tokens-api-change.yml
new file mode 100644
index 00000000000..f5122974844
--- /dev/null
+++ b/data/deprecations/15-8-revoked-agent-tokens-api-change.yml
@@ -0,0 +1,20 @@
+- title: "The API no longer returns revoked tokens for the agent for Kubernetes"
+  announcement_milestone: "15.8"
+  removal_milestone: "16.0"
+  breaking_change: true
+  reporter: nagyv-gitlab
+  stage: configure
+  issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/382129
+  body: |
+    Currently, GET requests to the [Cluster Agents API](https://docs.gitlab.com/ee/api/cluster_agents.html#list-tokens-for-an-agent)
+    endpoints can return revoked tokens. In GitLab 16.0, GET requests will not return revoked tokens.
+
+    You should review your calls to these endpoints and ensure you do not use revoked tokens.
+
+    This change affects the following REST and GraphQL API endpoints:
+
+    - REST API:
+      - [List tokens](https://docs.gitlab.com/ee/api/cluster_agents.html#list-tokens-for-an-agent)
+      - [Get a single token](https://docs.gitlab.com/ee/api/cluster_agents.html#get-a-single-agent-token)
+    - GraphQL:
+      - [`ClusterAgent.tokens`](https://docs.gitlab.com/ee/api/graphql/reference/#clusteragenttokens)
diff --git a/data/deprecations/15-8-terraform-latest-stable-change.yml b/data/deprecations/15-8-terraform-latest-stable-change.yml
new file mode 100644
index 00000000000..60e9a509252
--- /dev/null
+++ b/data/deprecations/15-8-terraform-latest-stable-change.yml
@@ -0,0 +1,18 @@
+- title: "The latest Terraform templates will overwrite current stable templates"
+  announcement_milestone: "15.8"
+  removal_milestone: "16.0"
+  breaking_change: true
+  reporter: nagyv-gitlab
+  stage: configure
+  issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/386001
+  body: |  # (required) Do not modify this line, instead modify the lines below.
+    With every major GitLab version, we update the stable Terraform templates with the current latest templates.
+    This change affects the [quickstart](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Terraform.gitlab-ci.yml)
+    and the [base](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Terraform/Base.gitlab-ci.yml) templates.
+
+    Because the new templates ship with default rules, the update might break your Terraform pipelines.
+    For example, if your Terraform jobs are triggered as a downstream pipeline, the rules won't trigger your jobs
+    in GitLab 16.0.
+
+    To accommodate the changes, you might need to adjust the [`rules`](https://docs.gitlab.com/ee/ci/yaml/#rules) in your
+    `.gitlab-ci.yml` file.
diff --git a/data/deprecations/15.8-kas-private-tls.yml b/data/deprecations/15.8-kas-private-tls.yml
new file mode 100644
index 00000000000..3d1a6e7830f
--- /dev/null
+++ b/data/deprecations/15.8-kas-private-tls.yml
@@ -0,0 +1,16 @@
+- title: "GitLab Helm chart values `gitlab.kas.privateApi.*` are deprecated"
+  announcement_milestone: "15.8"
+  removal_milestone: "17.0"
+  breaking_change: true
+  reporter: nagyv-gitlab
+  stage: configure
+  issue_url: https://gitlab.com/gitlab-org/charts/gitlab/-/issues/4097
+  body: |  # (required) Do not modify this line, instead modify the lines below.
+    We introduced the `global.kas.tls.*` Helm values to facilitate TLS communication between KAS and your Helm chart components.
+    The old values `gitlab.kas.privateApi.tls.enabled` and `gitlab.kas.privateApi.tls.secretName` are deprecated and scheduled for removal in GitLab 17.0.
+
+    Because the new values provide a streamlined, comprehensive method to enable TLS for KAS, you should use `global.kas.tls.*` instead of `gitlab.kas.privateApi.tls.*`. The `gitlab.kas.privateApi.tls.*` For more information, see:
+
+    - The [merge request](https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/2888) that introduces the `global.kas.tls.*` values.
+    - The [deprecated `gitlab.kas.privateApi.tls.*` documentation](https://docs.gitlab.com/charts/charts/gitlab/kas/index.html#enable-tls-communication-through-the-gitlabkasprivateapi-attributes-deprecated).
+    - The [new `global.kas.tls.*` documentation](https://docs.gitlab.com/charts/charts/globals.html#tls-settings-1).