sameersbn / sameersbn/docker-gitlab

GITLAB_THROTTLE_USER_ALLOWLIST does not work

Open
#2,617 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
8.1k
Forks
2.1k
Avg merge
17h 47m
Merged PRs (30d)
7

Description

Hi, I'm trying to allow admin users to bypass authenticated request rate limiting based on this doc https://docs.gitlab.com/ee/user/admin_area/settings/user_and_ip_rate_limits.html#allow-specific-users-to-bypass-authenticated-request-rate-limiting

I set - GITLAB_THROTTLE_USER_ALLOWLIST=157,114,24,15,8 in docker-compose.ymland restart docker service.

Though I notice gitlab_throttle_user_allowlist is logged in auth.log file(see below), admin users occasionally are throttled.

{"severity":"INFO","time":"2022-08-17T03:34:41.297Z","correlation_id":null,"gitlab_throttle_user_allowlist":[157,114,24,15,8]}
{"severity":"INFO","time":"2022-08-17T04:07:14.986Z","correlation_id":null,"gitlab_throttle_user_allowlist":[157,114,24,15,8]}
{"severity":"INFO","time":"2022-08-17T04:42:06.797Z","correlation_id":null,"gitlab_throttle_user_allowlist":[157,114,24,15,8]}

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the documented GITLAB_THROTTLE_USER_ALLOWLIST setting and its docker-compose.yml entry, then compare the configured values with the auth.log output. Reproduce a rate-limited request as an allowlisted admin user and trace where the allowlist is applied. Done means listed users consistently bypass authenticated request rate limiting.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, docker-compose, gitlab
Domain
authentication, devops, infrastructure
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.