Moaz Khalifa activity https://gitlab.com/mkhalifa3 2026-03-18T12:14:10Z tag:gitlab.com,2026-03-16:5210349470 Moaz Khalifa pushed to project branch master at GitLab.org / GitLab 2026-03-16T23:07:14Z mkhalifa3 Moaz Khalifa

Moaz Khalifa (4d91186d) at 16 Mar 23:07

Merge branch '588110-update-models-with-identical-policies-to-use-d...

... and 1 more commit

tag:gitlab.com,2026-03-16:5210348802 Moaz Khalifa deleted project branch 588110-update-models-with-identical-policies-to-use-declarative_policy_class at GitLab.org / GitLab 2026-03-16T23:06:53Z mkhalifa3 Moaz Khalifa

Moaz Khalifa (df4eccbf) at 16 Mar 23:06

tag:gitlab.com,2026-03-16:5210347480 Moaz Khalifa accepted merge request !225625: Refactor models with identical policies to use `declarative_policy_class` at GitLab.org / GitLab 2026-03-16T23:06:08Z mkhalifa3 Moaz Khalifa

What does this MR do and why?

This refactors a bunch of virtual registries models to use declarative_policy_class to point to the correct policy instead of a dummy policy file for each of them, which only delegates rules.

References

Screenshots or screen recordings

Before After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

tag:gitlab.com,2026-03-16:5209400470 Moaz Khalifa commented on merge request !227323 at GitLab.org / GitLab 2026-03-16T17:20:22Z mkhalifa3 Moaz Khalifa

Thanks @10io! 🙏

Left one question on the default value bump. Let me know what you think! 🏓

tag:gitlab.com,2026-03-16:5209400462 Moaz Khalifa commented on merge request !227323 at GitLab.org / GitLab 2026-03-16T17:20:22Z mkhalifa3 Moaz Khalifa

Just changing the default value does not increase the value of the virtual_registries_endpoints_api_limit because it is already saved in the rate_limits JSONB column in the database.

# on master
ApplicationSetting.last.rate_limits["virtual_registries_endpoints_api_limit"]
=> 1000

# on this branch
ApplicationSetting.last.rate_limits["virtual_registries_endpoints_api_limit"]
=> 1000

So, if we want the new value to take effect after this MR has been deployed, will we need a database migration to update the value in the JSONB column?

tag:gitlab.com,2026-03-16:5209173083 Moaz Khalifa opened merge request !227527: Remove revoked role requirement for virtual registry access at GitLab.org / GitLab 2026-03-16T16:20:28Z mkhalifa3 Moaz Khalifa

What does this MR do and why?

References

Screenshots or screen recordings

Before After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

tag:gitlab.com,2026-03-16:5209080179 Moaz Khalifa pushed new project branch mkhalifa3-update-vreg-docs at GitLab.org / GitLab 2026-03-16T16:00:13Z mkhalifa3 Moaz Khalifa

Moaz Khalifa (fb54096d) at 16 Mar 16:00

Remove revoked role requirement for virtual registry access

tag:gitlab.com,2026-03-16:5208906209 Moaz Khalifa commented on merge request !226797 at GitLab.org / GitLab 2026-03-16T15:23:11Z mkhalifa3 Moaz Khalifa

Thanks @rchanila! 🙏

Given https://gitlab.com/groups/gitlab-org/-/work_items/21311+, do you think we still need to move forward here? Most of the other ongoing VReg MRs have been paused.

tag:gitlab.com,2026-03-16:5208463376 Moaz Khalifa approved merge request !225625: Refactor models with identical policies to use `declarative_policy_class` at GitLab.org / GitLab 2026-03-16T13:52:42Z mkhalifa3 Moaz Khalifa

What does this MR do and why?

This refactors a bunch of virtual registries models to use declarative_policy_class to point to the correct policy instead of a dummy policy file for each of them, which only delegates rules.

References

Screenshots or screen recordings

Before After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

tag:gitlab.com,2026-03-16:5208463333 Moaz Khalifa commented on merge request !225625 at GitLab.org / GitLab 2026-03-16T13:52:41Z mkhalifa3 Moaz Khalifa

suggestion (non-blocking): I think we don't need to create a group to pass it here:

      setting = build(:virtual_registries_setting)

This works for me too.

tag:gitlab.com,2026-03-16:5208463324 Moaz Khalifa commented on merge request !225625 at GitLab.org / GitLab 2026-03-16T13:52:41Z mkhalifa3 Moaz Khalifa

Thanks @pskorupa! 🙏

Left two more suggestions, but they can be done in a follow-up.

Approving here & setting MWPS! 🚀

tag:gitlab.com,2026-03-16:5208463258 Moaz Khalifa commented on merge request !225625 at GitLab.org / GitLab 2026-03-16T13:52:40Z mkhalifa3 Moaz Khalifa

Do we need a spec for this?