Skip to content

secure_vulnerability_autofix_indicator Enable Autofix Indicator on Vulnerabilty List

What

This Issue will track the status of the secure_vulnerability_autofix_indicator Feature Flag. This Feature Flag toggles the Auto Fix indicator on the Vulnerability List Page Screenshot_2020-11-20_at_16.58.33

Owners

  • Team: Secure Frontend Team
  • Most appropriate slack channel to reach out to: #s_secure-frontend
  • Best individual to reach out to: @jannik_lehmann

What are we expecting to happen?

Once turned on this feature Flag will enable the Auto Fix Indicator on the Vulnerability List Page once the Backend Implementation is done.

What might happen if this goes wrong?

The Vulnerabilty List will go in to an error state if this Flag gets enabled with no corresponding Data from the Backend.

Roll Out Steps

  • Confirm that QA tests pass with the feature flag enabled (if you're unsure how, contact the relevant stable counterpart in the Quality department)
  • Enable on staging (/chatops run feature set feature_name true --staging)
  • Test on staging
  • Ensure that documentation has been updated
  • Enable on GitLab.com for individual groups/projects listed above and verify behaviour (/chatops run feature set --project=gitlab-org/gitlab feature_name true)
  • Coordinate a time to enable the flag with the SRE oncall and release managers
    • In #production mention @sre-oncall and @release-managers. Once an SRE on call and Release Manager on call confirm, you can proceed with the rollout
  • Announce on the issue an estimated time this will be enabled on GitLab.com
  • Enable on GitLab.com by running chatops command in #production (/chatops run feature set feature_name true)
  • Cross post chatops Slack command to #support_gitlab-com (more guidance when this is necessary in the dev docs) and in your team channel
  • Announce on the issue that the flag has been enabled
  • Remove feature flag and add changelog entry
  • After the flag removal is deployed, clean up the feature flag by running chatops command in #production channel

Rollback Steps

  • This feature can be disabled by running the following Chatops command:
/chatops run feature set --project=gitlab-org/gitlab secure_vulnerability_autofix_indicator false
Edited by Tetiana Chupryna