Skip to content

Draft: Move max_personal_access_token_lifetime setting to CE

Jessie Young requested to merge jy-add-ce-setting into master

What does this MR do and why?

  • This is an instance level setting that was previously available to Ultimate customers only.
  • As part of the %16.0 breaking change, we added a background migration to set expires_at on all existing PATs with a nil expiry to 365 days in the future.
  • We also added Ruby that will make it impossible (unless someone has direct access to the SQL database) to create new PATs with an expiration date more than 365 days in the future.
  • This MR moves the setting to CE so that any instance could set the max to a lower value than 365.
  • Next up, we will be writing a backfill migration so that this instance-level valueis set for all self-managed instances.
  • #369123 (closed)

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports