gitlab_applicationgitlab_branchgitlab_commitgitlab_epicgitlab_groupgitlab_group_access_requestgitlab_group_hookgitlab_group_iterationgitlab_group_membergitlab_group_projectgitlab_group_push_rulegitlab_group_subgroupgitlab_group_variablegitlab_hookgitlab_instance_variablegitlab_issuegitlab_merge_requestgitlab_merge_request_changegitlab_my_eventgitlab_my_issuegitlab_my_projectgitlab_projectgitlab_project_access_requestgitlab_project_container_registrygitlab_project_deploymentgitlab_project_iterationgitlab_project_jobgitlab_project_membergitlab_project_pages_domaingitlab_project_pipelinegitlab_project_pipeline_detailgitlab_project_protected_branchgitlab_project_repositorygitlab_project_repository_filegitlab_project_variablegitlab_settinggitlab_snippetgitlab_usergitlab_user_eventgitlab_version
Table: gitlab_setting
The gitlab_setting
table is used to obtain the settings for the GitLab instance you're connected to.
Note: When used with the Public GitLab may result in a 403 Forbidden error.
Example
Obtain settings
select *from gitlab_setting;
Schema for gitlab_setting
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form, e.g. connection_name. | |
abuse_notification_email | text | Email address for abuse notifications. | |
admin_mode | boolean | Indicates if admins must re-authenticate to perform administrative functions. | |
admin_notification_email | text | The email address for administrative notifications. [DEPRECATED] | |
after_sign_out_path | text | The location users are redirect to upon logging out. | |
after_sign_up_text | text | Text displayed after user signs up. | |
akismet_api_key | text | The API key used for Akisment if enabled. | |
akismet_enabled | boolean | Indicates if Akismet spam protection is enabled. | |
allow_group_owners_to_manage_ldap | boolean | Indicates if group owners can manage a linked LDAP for permissions. | |
allow_local_requests_from_system_hooks | boolean | Indicates if requests can be sent to the local network from system hooks. | |
allow_local_requests_from_web_hooks_and_services | boolean | Indicates if requests can be sent to the local network from web hooks and services. | |
archive_builds_in_human_readable | text | The human readable representation of when jobs are regarded as expired, if null they never expire. | |
asset_proxy_allowlist | jsonb | An array of domains which are not proxied. | |
asset_proxy_enabled | boolean | Indicates if asset proxying is enabled. | |
asset_proxy_secret_key | text | The secret key used to provide access to the asset proxy server. | |
asset_proxy_url | text | The URL of the asset proxy server. | |
authorized_keys_enabled | boolean | Indicates if the authorized_keys file is supported for SSH within GitLab instance. | |
auto_devops_domain | text | The domain used by default for all projects Auto Review Apps and Auto Deploy stages. | |
auto_devops_enabled | boolean | Indicates if auto devops is enabled for projects by default. | |
automatic_purchased_storage_allocation | boolean | Indicates if purchased storage is automatically allocated. | |
can_create_group | boolean | Indicates if current user can create groups. | |
commit_email_hostname | text | ||
container_expiration_policies_enable_historic_entries | boolean | Indicates if cleanup policies are enabled for all projects. | |
container_registry_cleanup_tags_service_max_list_size | bigint | Maximum size of container registry tags before cleaning older ones. | |
container_registry_delete_tags_service_timeout | bigint | Timeout when attempting to delete tags from container registry. | |
container_registry_expiration_policies_caching | boolean | Indicates if caching is enabled for expiration policies in the container registry. | |
container_registry_expiration_policies_worker_capacity | bigint | Capacity of workers processing expiration policies on the container registry. | |
container_registry_import_created_before | timestamp with time zone | ||
container_registry_import_max_retries | bigint | Maximum number of retries when importing images into container registry. | |
container_registry_import_max_step_duration | bigint | Maximum duration for the import step. | |
container_registry_import_max_tags_count | bigint | Maximum number of tags that can be imported into the container registry. | |
container_registry_token_expire_delay | bigint | Container registry token expiration in minutes. | |
created_at | timestamp with time zone | Timestamp when the settings were created. | |
custom_http_clone_url_root | text | Custom root URL for http cloning. | |
deactivate_dormant_users | boolean | Indicates if dormant users will be deactivated after a period of time. | |
default_artifacts_expire_in | text | The human-readable default expiration time of each jobs artifacts. | |
default_branch_name | text | Instance level initial branch name. | |
default_branch_protection | bigint | Level of default branch protection. | |
default_ci_config_path | text | The default path for CI configuration. | |
default_group_visibility | text | The default visibility of groups, can be private, internal or public. | |
default_project_creation | bigint | Default project creation protection level (0 no one, 1 maintainers, 2 developers & maintainers). | |
default_project_deletion_protection | boolean | Indicates if project deletion protection is enabled by default. | |
default_project_visibility | text | The default visibility of projects, can be private, internal or public. | |
default_projects_limit | bigint | Limit of personal projects each user can create in the instance. | |
default_snippet_visibility | text | The default visibility of snippets, can be private, internal or public. | |
delayed_group_deletion | boolean | Indicates if group deletions are delayed. | |
delayed_project_deletion | boolean | Indicates if project deletions are delayed. | |
delete_inactive_projects | boolean | Indicates if inactive projects are deleted. | |
deletion_adjourned_period | bigint | The period which deletions are delayed (if set). | |
diff_max_files | bigint | Maximum number of files shown for a diff. | |
diff_max_lines | bigint | Maximum number of lines shown for a diff. | |
diff_max_patch_bytes | bigint | Maximum number of patch bytes shown for a diff. | |
disable_feed_token | boolean | Indicates if the feed token is disabled. | |
disable_overriding_approvers_per_merge_request | boolean | Indicates if overriding the approvers of a merge request is disabled. | |
disabled_oauth_sign_in_sources | jsonb | Disabled OAuth sign-in sources. | |
dns_rebinding_protection_enabled | boolean | Indicates if DNS rebinding attack protection is enforced. | |
domain_allowlist | jsonb | An array of domains allowed. | |
domain_denylist | jsonb | An array of domains on the denylist, will only be used if domain_denylist_enabled is true. | |
domain_denylist_enabled | boolean | Indicates if domain_denylist is enabled. | |
dsa_key_restriction | bigint | The minimum allowed bit length of an uploaded DSA key. Default is 0 (no restriction). -1 disables DSA keys. | |
ecdsa_key_restriction | bigint | The minimum allowed curve size (in bits) of an uploaded ECDSA key. Default is 0 (no restriction). -1 disables ECDSA keys. | |
ed25519_key_restriction | bigint | The minimum allowed curve size (in bits) of an uploaded ED25519 key. Default is 0 (no restriction). -1 disables ED25519 keys. | |
eks_access_key_id | text | The access key used for EKS integration. | |
eks_account_id | text | The account ID that EKS is running on. | |
eks_integration_enabled | boolean | Indicates if EKS integration is enabled. | |
eks_secret_access_key | text | The secret access key used for EKS integration. | |
email_additional_text | text | Additional text appended to emails. | |
email_author_in_body | boolean | Indicates if the email of the author of issue, MR, comment, etc is included in the email body instead of replacing the email of sender. | |
email_restrictions | text | Email restrictions. | |
email_restrictions_enabled | boolean | Indicates if email restrictions are enabled. | |
enabled_git_access_protocol | text | The enabled protocols for git access, values are ssh, http or nil. | |
enforce_namespace_storage_limit | boolean | Indicates if namespace storage limits are enforced. | |
enforce_pat_expiration | boolean | Indicates if personal access token expiration is enforced. | |
enforce_ssh_key_expiration | boolean | Indicates if ssh key expiration is enforced. | |
enforce_terms | boolean | Indicates if terms are enforced as application terms of service. | |
external_auth_client_cert | text | The certificate used to authenticate with external authorization service. | |
external_auth_client_key | text | The private key for the certificate used for authentication - this is encrypted when stored. | |
external_auth_client_key_pass | text | The passphrase to use for private key - is encrypted when stored. | |
external_authorization_service_default_label | text | The default classification label to use when requesting authorization and no classification label has been specified on the project. | |
external_authorization_service_enabled | boolean | Indicates if using an external authorization service for accessing projects. | |
external_authorization_service_timeout | double precision | The timeout after which an authorization request is aborted, in seconds. | |
external_authorization_service_url | text | The URL to which authorization requests are directed. | |
external_pipeline_validation_service_timeout | bigint | How long to wait for a response from the pipeline validation service. | |
external_pipeline_validation_service_token | text | The token to include as the X-Gitlab-Token header in requests to the URL in external_pipeline_validation_service_url. | |
external_pipeline_validation_service_url | text | The URL to use for pipeline validation requests. | |
first_day_of_week | bigint | Start day of the week for calendar views and date pickers. Valid values are 0 (default) for Sunday, 1 for Monday, and 6 for Saturday. | |
floc_enabled | boolean | Indicates if floc is enabled. | |
geo_node_allowed_ips | text | Geonode allowed IPs. | |
geo_status_timeout | bigint | Geo status timeout. | |
git_rate_limit_users_allowlist | jsonb | An array of users allowed to bypass git rate limits. | |
gitaly_timeout_default | bigint | Default Gitaly timeout, in seconds. | |
gitaly_timeout_fast | bigint | Gitaly fast operation timeout, in seconds. | |
gitaly_timeout_medium | bigint | Medium Gitaly timeout, in seconds. | |
gitpod_enabled | boolean | Indicates if GitPod is enabled. | |
gitpod_url | text | The url for GitPod. | |
grafana_enabled | boolean | Indicates if grafana is enabled. | |
grafana_url | text | The URL of the grafana instance. | |
gravatar_enabled | boolean | Indicates if gravatar is enabled. | |
group_owners_can_manage_default_branch_protection | boolean | Indicates if group owners can manage default branch protection settings. | |
group_runner_token_expiration_interval | bigint | Expiration interval for group runner tokens. | |
hashed_storage_enabled | boolean | Indicates if hashed storage is enabled. | |
help_page_hide_commercial_content | boolean | Indicates if marketing-related entries are hidden from help. | |
help_page_support_url | text | Alternate support URL for help page and help dropdown. | |
help_page_text | text | Custom text displayed on the help page. | |
hide_third_party_offers | boolean | Indicates if third-party offers are hidden in GitLab. | |
home_page_url | text | The location users are sent to if not logged in. | |
housekeeping_bitmaps_enabled | boolean | Git pack file bitmap creation is always enabled and cannot be changed via API and UI. This API field is deprecated and always returns true. | |
housekeeping_enabled | boolean | Indicates if housekeeping is enabled. | |
housekeeping_full_repack_period | bigint | Number of Git pushes after which a full git repack is run. | |
housekeeping_gc_period | bigint | Number of Git pushes after which git gc is run. | |
housekeeping_incremental_repack_period | bigint | Number of Git pushes after which an incremental git repack is run. | |
html_emails_enabled | boolean | Indicates if HTML emails are enabled. | |
id | bigint | The ID of the settings. | |
import_sources | jsonb | An array is strings used to define sources from which projects can be imported. | |
in_product_marketing_emails_enabled | boolean | Indicates if marketing emails are enabled. | |
inactive_projects_delete_after_months | bigint | Number of months of inactivity before projects are deleted, if delete_inactive_projects is true. | |
inactive_projects_min_size_mb | bigint | Minimum size in MB of inactive projects to be considered for deletion, if delete_inactive_projects is true. | |
inactive_projects_send_warning_email_after_months | bigint | Number of months after which an email will be sent warning of inactive project to be deleted, if delete_inactive_projects is true. | |
invisible_captcha_enabled | boolean | Indicates if invisible captchas are enabled. | |
issues_create_limit | bigint | Limit of issues that can be created over a certain period. | |
keep_latest_artifact | boolean | Indicates if latest artifact if kept. | |
local_markdown_version | bigint | Increase this value when any cached Markdown should be invalidated. | |
lock_memberships_to_ldap | boolean | Indicates if membership is only available via LDAP synced accounts. | |
login_recaptcha_protection_enabled | boolean | Indicates if logins are protected by recaptcha. | |
maintenance_mode | boolean | Indicates if GitLab is in maintenance mode. | |
maintenance_mode_message | text | Message displayed to users when maintenance_mode is true. | |
max_artifacts_size | bigint | Maximum artifacts size in MB. | |
max_attachment_size | bigint | Limit of attachment size in MB. | |
max_export_size | bigint | Maximum export size in MB. | |
max_import_size | bigint | Maximum import size in MB. | |
max_pages_size | bigint | Maximum size of pages repositories in MB. | |
max_personal_access_token_lifetime | bigint | Maximum TTL of PAT. | |
max_ssh_key_lifetime | bigint | Maximum TTL of SSH keys. | |
max_yaml_depth | bigint | Maximum depth levels in yaml files. | |
max_yaml_size_bytes | bigint | Maximum size in bytes of yaml files. | |
metrics_method_call_threshold | bigint | A method call is only tracked when it takes longer than the given amount of milliseconds. | |
minimum_password_length | bigint | Minimum length of passwords for GitLab maintained accounts. | |
mirror_available | boolean | Indicates if Maintainers can mirror repositories. | |
mirror_capacity_threshold | bigint | Minimum capacity to be available before scheduling more mirrors preemptively. | |
mirror_max_capacity | bigint | Maximum number of mirrors that can be synchronizing at the same time. | |
mirror_max_delay | bigint | Maximum time (in minutes) between updates that a mirror can have when scheduled to synchronize. | |
notes_create_limit | bigint | Limit of notes that can be created over a specific period. | |
outbound_local_requests_whitelist | jsonb | An array of trusted domains or IP addresses to which local requests are allowed when local requests for hooks and services are disabled. | |
pages_domain_verification_enabled | boolean | Indicates if users need to prove ownership of custom domain. | |
password_authentication_enabled_for_git | boolean | Indicates if authentication for Git over HTTP(S) via a GitLab account password is enabled. | |
password_authentication_enabled_for_web | boolean | indicates if authentication for the web interface via a GitLab account password is enabled. | |
password_lowercase_required | boolean | Indicates if password must contain lowercase characters. | |
password_number_required | boolean | Indicates if password must contain numerics. | |
password_symbol_required | boolean | Indicates if password must contain symbols. | |
password_uppercase_required | boolean | Indicates if password must contain uppercase characters. | |
performance_bar_allowed_group_path | text | Path of the group that is allowed to toggle the performance bar. | |
performance_bar_enabled | boolean | Indicates if performance bar is enabled. | |
personal_access_token_prefix | text | Custom prefix attached to personal access tokens. | |
plantuml_enabled | boolean | Indicates if Plant UML integration is enabled. | |
plantuml_url | text | The PlantUML instance URL for integration. | |
polling_interval_multiplier | double precision | Interval multiplier used by endpoints that perform polling. | |
prevent_merge_request_author_approval | boolean | Indicates if merge requests require author approval. | |
prevent_merge_request_committers_approval | boolean | Indicates if merge requests require committer approval. | |
project_export_enabled | boolean | Indicates if project exporting is enabled. | |
project_runner_token_expiration_interval | bigint | Interval at which project runner tokens expire | |
prometheus_metrics_enabled | boolean | Indicates if prometheus metrics are enabled. | |
protected_ci_variables | boolean | Indicates if CI/CD variables are protected by default. | |
pseudonymizer_enabled | boolean | Indicates if the pseudonymizer is enabled. | |
push_event_activities_limit | bigint | Number of changes (branches or tags) in a single push to determine whether individual push events or bulk push events are created. | |
push_event_hooks_limit | bigint | Number of changes (branches or tags) in a single push to determine whether webhooks and services fire or not. | |
rate_limiting_response_text | text | Text returned to users upon hitting the rate limit. | |
recaptcha_enabled | boolean | Indicates if reCAPTCHA is enabled. | |
recaptcha_private_key | text | Private key for reCAPTCHA. | |
recaptcha_site_key | text | Site key for reCAPTCHA. | |
receive_max_input_size | bigint | Maximum push size (MB). | |
repository_checks_enabled | boolean | Indicates if GitLab periodically runs git fsck in all project and wiki repositories to look for silent disk corruption issues. | |
repository_size_limit | bigint | Size limit per repository (MB). | |
repository_storages | jsonb | An array of names of enabled storage paths, taken from gitlab.yml. | |
require_admin_approval_after_user_signup | boolean | Indicates if users require approval from an administrator after signing up. | |
require_two_factor_authentication | boolean | Indicates if 2FA is required for all users. | |
restricted_visibility_levels | jsonb | An array of levels that cannot be used by non-Administrator users for groups, projects or snippets. | |
rsa_key_restriction | bigint | The minimum allowed bit length of an uploaded RSA key. Default is 0 (no restriction). -1 disables RSA keys. | |
runner_token_expiration_interval | bigint | Interval after which runner tokens expire. | |
search_rate_limit | bigint | Rate limit for searching for authenticated users. | |
search_rate_limit_unauthenticated | bigint | Rate limit for searching for unauthenticated users. | |
send_user_confirmation_email | boolean | Indicates if users receive a confirmation email on sign-up. | |
session_expire_delay | bigint | Session duration in minutes. | |
shared_runners_enabled | boolean | Indicates if shared runners are enabled for new projects. | |
shared_runners_minutes | bigint | The maximum number of CI/CD minutes that a group can use on shared runners per month. | |
shared_runners_text | text | Shared runners text. | |
sign_in_text | text | Text on the login page. | |
signup_enabled | boolean | Indicates if user registration is allowed. | |
snowplow_collector_hostname | text | The Snowplow collector hostname. | |
snowplow_cookie_domain | text | The Snowplow cookie domain. | |
snowplow_enabled | boolean | Indicates if snowplow tracking is enabled. | |
snowplow_site_id | text | The Snowplow site name / application ID. | |
terminal_max_session_time | bigint | Maximum time for web terminal websocket connection (in seconds). 0 for unlimited time. | |
terms | text | The terms of service. | |
throttle_authenticated_api_enabled | boolean | Indicates if authenticated API request rate limit is enabled. | |
throttle_authenticated_api_period_in_seconds | bigint | Rate limit period (in seconds). | |
throttle_authenticated_api_requests_per_period | bigint | Maximum requests per period per user. | |
throttle_authenticated_web_enabled | boolean | Indicates if authenticated web request rate limit is enabled. | |
throttle_authenticated_web_period_in_seconds | bigint | Rate limit period (in seconds). | |
throttle_authenticated_web_requests_per_period | bigint | Maximum requests per period per user. | |
throttle_unauthenticated_enabled | boolean | Indicates if unauthenticated web request rate limit is enabled. | |
throttle_unauthenticated_period_in_seconds | bigint | Rate limit period (in seconds). | |
throttle_unauthenticated_requests_per_period | bigint | Maximum requests per period per IP. | |
time_tracking_limit_to_hours | boolean | Indicates if time tracking units is limited to hours only. | |
two_factor_grace_period | bigint | Amount of time (in hours) that users are allowed to skip forced configuration of two-factor authentication. | |
unique_ips_limit_enabled | boolean | Indicates if users are limited to sign in from different IPs. | |
unique_ips_limit_per_user | bigint | Maximum number of IPs per user. | |
unique_ips_limit_time_window | bigint | How many seconds an IP is counted towards the limit. | |
updated_at | timestamp with time zone | Timestamp when the settings were last updated. | |
updating_name_disabled_for_users | boolean | Indicates if updating names is disabled for users. | |
usage_ping_enabled | boolean | Indicates if every week GitLab reports license usage back to GitLab, Inc. | |
usage_ping_features_enabled | boolean | Indicates if GitLab reports feature license usage back to GitLab, Inc. | |
user_deactivation_emails_enabled | boolean | Indicates if user deactivation emails are sent. | |
user_default_external | boolean | Indicates if newly registered users are external by default. | |
user_default_internal_regex | text | Specify an email address regex pattern to identify default internal users. | |
user_oauth_applications | boolean | Indicates if users can register any application to use GitLab as an OAuth provider. | |
user_show_add_ssh_key_message | boolean | Indicates if the warning is shown to users when they haven't configured an SSH key. | |
version_check_enabled | boolean | Indicates if GitLab checks for new versions and informs about available updates. | |
web_ide_clientside_preview_enabled | boolean | Indicates if Live Preview (allow live previews of JavaScript projects in the Web IDE using CodeSandbox Live Preview) is enabled. |