Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 0 additions & 16 deletions .devcontainer/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -3,19 +3,3 @@
# [Choice] Node.js version
ARG VARIANT="dev-22-bullseye"
FROM mcr.microsoft.com/devcontainers/javascript-node:${VARIANT}

# [Optional] Uncomment this section to install additional OS packages.
# RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
# && apt-get -y install --no-install-recommends <your-package-list-here>

# [Optional] Uncomment if you want to install an additional version of node using nvm
# ARG EXTRA_NODE_VERSION=10
# RUN su node -c "source /usr/local/share/nvm/nvm.sh && nvm install ${EXTRA_NODE_VERSION}"

# [Optional] Uncomment if you want to install more global node modules
# RUN su node -c "npm install -g <your-package-list-here>"

# Install the GitHub CLI see:
# https://github.com/microsoft/vscode-dev-containers/blob/3d59f9fe37edb68f78874620f33dac5a62ef2b93/script-library/docs/github.md
COPY library-scripts/github-debian.sh /tmp/library-scripts/
RUN apt-get update && bash /tmp/library-scripts/github-debian.sh
7 changes: 5 additions & 2 deletions .devcontainer/devcontainer.json
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,8 @@

// Install features. Type 'feature' in the VS Code command palette for a full list.
"features": {
"sshd": "latest"
"sshd": "latest",
"ghcr.io/devcontainers/features/github-cli:1": {}
},

"customizations": {
Expand Down Expand Up @@ -53,13 +54,15 @@

"portsAttributes": {
"4000": {
"label": "Preview"
"label": "Review"
}
},

// Lifecycle commands
"onCreateCommand": "npm ci",
"postStartCommand": "nohup bash -c 'npm start &'",
// Set the port to be public
"postAttachCommand": "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\"",

// Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
"remoteUser": "node",
Expand Down
43 changes: 0 additions & 43 deletions .devcontainer/library-scripts/github-debian.sh

This file was deleted.

Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ layout: inline
versions:
fpt: '*'
ghec: '*'
ghes: '>= 3.9'
ghes: '*'
type: overview
topics:
- Actions Runner Controller
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ shortTitle: About Support for ARC
versions:
fpt: '*'
ghec: '*'
ghes: '>= 3.9'
ghes: '*'
topics:
- Actions Runner Controller
- Support
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ intro: 'Learn how to authenticate to the {% data variables.product.company_short
versions:
fpt: '*'
ghec: '*'
ghes: '>= 3.9'
ghes: '*'
type: overview
topics:
- Actions Runner Controller
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ intro: 'Learn how to deploy runner scale sets with {% data variables.product.pro
versions:
fpt: '*'
ghec: '*'
ghes: '>= 3.9'
ghes: '*'
type: overview
topics:
- Actions Runner Controller
Expand Down Expand Up @@ -892,12 +892,8 @@ The following table shows the metrics emitted by the controller-manager and list
| listener | gha_idle_runners | gauge | Number of registered runners not running a job |
| listener | gha_started_jobs_total | counter | Total number of jobs started since the listener became ready [1] |
| listener | gha_completed_jobs_total | counter | Total number of jobs completed since the listener became ready [1] |
| {% ifversion fpt or ghec or ghes > 3.10 %} |
| listener | gha_job_startup_duration_seconds | histogram | Number of seconds spent waiting for workflow job to get started on the runner owned by the runner scale set |
| {% endif %} |
| {% ifversion fpt or ghec or ghes > 3.10 %} |
| listener | gha_job_execution_duration_seconds | histogram | Number of seconds spent executing workflow jobs by the runner scale set |
| {% endif %} |

[1]: Listener metrics that have the counter type are reset when the listener pod restarts.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ intro: 'Try out {% data variables.product.prodname_actions_runner_controller %}
versions:
fpt: '*'
ghec: '*'
ghes: '>= 3.9'
ghes: '*'
type: quick_start
topics:
- Actions Runner Controller
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ intro: 'Learn how to troubleshoot {% data variables.product.prodname_actions_run
versions:
fpt: '*'
ghec: '*'
ghes: '>= 3.9'
ghes: '*'
type: how_to
topics:
- Actions Runner Controller
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ intro: 'You can use {% data variables.product.prodname_actions_runner_controller
versions:
fpt: '*'
ghec: '*'
ghes: '>= 3.9'
ghes: '*'
type: overview
topics:
- Actions Runner Controller
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -1302,7 +1302,7 @@ During an upgrade to a feature release, this utility displays the status of back
{% ifversion ghes < 3.12 %}

> [!NOTE]
> To use `ghe-check-background-upgrade-jobs` with {% data variables.product.prodname_ghe_server %} {{ allVersions[currentVersion].currentRelease }}, your instance must run version {{ allVersions[currentVersion].currentRelease }}.{% ifversion ghes = 3.10 %}4{% elsif ghes = 3.11 %}1{% endif %} or later.
> To use `ghe-check-background-upgrade-jobs` with {% data variables.product.prodname_ghe_server %} {{ allVersions[currentVersion].currentRelease }}, your instance must run version {{ allVersions[currentVersion].currentRelease }}.1 or later.

{% endif %}

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -33,10 +33,10 @@ To prevent new packages from being uploaded, you can set an ecosystem you previo
{% data reusables.enterprise_site_admin_settings.management-console %}
{% data reusables.enterprise_site_admin_settings.packages-tab %}
1. Under "Ecosystem Toggles", for each package type, select **Enabled**, **Read-Only**, or **Disabled**.
{%- ifversion ghes %}

> [!NOTE]
> Subdomain isolation must be enabled to toggle the {% data variables.product.prodname_container_registry %} options.
{%- endif %}

![Screenshot of the "Ecosystem toggles" section on the Settings page of the Management Console.](/assets/images/enterprise/site-admin-settings/ecosystem-toggles.png)

{% data reusables.enterprise_management_console.save-settings %}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,6 @@ Ensure your AWS access key ID and secret have the following permissions:
{% data reusables.enterprise_site_admin_settings.management-console %}
{% data reusables.enterprise_site_admin_settings.packages-tab %}
{% data reusables.package_registry.enable-enterprise-github-packages %}
{% ifversion ghes -%}
1. Under "Packages Storage", select **Amazon S3** and enter your storage bucket's details:
* **AWS Service URL:** The service URL for your bucket. For example, if your S3 bucket was created in the `us-west-2 region`, this value should be `https://s3.us-west-2.amazonaws.com`.

Expand All @@ -48,7 +47,6 @@ Ensure your AWS access key ID and secret have the following permissions:
* **AWS S3 Access Key** and **AWS S3 Secret Key:** The AWS access key ID and secret key to access your bucket.

For more information on managing AWS access keys, see the [AWS Identity and Access Management Documentation](https://docs.aws.amazon.com/iam/index.html).
{%- endif %}
{% data reusables.enterprise_management_console.save-settings %}

## Next steps
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -40,13 +40,11 @@ Although MinIO does not currently appear in the user interface under "Package St
{% data reusables.enterprise_site_admin_settings.management-console %}
{% data reusables.enterprise_site_admin_settings.packages-tab %}
{% data reusables.package_registry.enable-enterprise-github-packages %}
{% ifversion ghes -%}
1. Under "Packages Storage", select **Amazon S3**.
1. Enter your MinIO storage bucket's details in the AWS storage settings.
* **AWS Service URL:** The hosting URL for your MinIO bucket.
* **AWS S3 Bucket:** The name of your S3-compatible MinIO bucket dedicated to {% data variables.product.prodname_registry %}.
* **AWS S3 Access Key** and **AWS S3 Secret Key:** Enter the MinIO access key ID and secret key to access your bucket.
{%- endif %}
{% data reusables.enterprise_management_console.save-settings %}

## Next steps
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -46,13 +46,13 @@ For more information about adjusting resources for an existing instance, see [AU
After enabling {% data variables.product.prodname_registry %} for {% data variables.location.product_location %}, you'll need to prepare your third-party storage bucket. The amount of storage required depends on your usage of {% data variables.product.prodname_registry %}, and the setup guidelines can vary by storage provider.

Supported external storage providers
* Amazon Web Services (AWS) S3 {% ifversion ghes %}
* Azure Blob Storage {% endif %}
* Amazon Web Services (AWS) S3
* Azure Blob Storage
* MinIO

To enable {% data variables.product.prodname_registry %} and configure third-party storage, see:
* [AUTOTITLE](/admin/packages/enabling-github-packages-with-aws){% ifversion ghes %}
* [AUTOTITLE](/admin/packages/enabling-github-packages-with-azure-blob-storage){% endif %}
* [AUTOTITLE](/admin/packages/enabling-github-packages-with-aws)
* [AUTOTITLE](/admin/packages/enabling-github-packages-with-azure-blob-storage)
* [AUTOTITLE](/admin/packages/enabling-github-packages-with-minio)

## Step 4: Specify the package ecosystems to support on your instance
Expand Down
3 changes: 1 addition & 2 deletions content/admin/configuring-packages/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,5 +20,4 @@ children:
shortTitle: Packages
---
{% data reusables.package_registry.packages-ghes-release-stage %}
{% ifversion ghes %}
{% endif %}

Original file line number Diff line number Diff line change
Expand Up @@ -26,12 +26,8 @@ For more information about configuring {% data variables.product.prodname_regist

{% data reusables.package_registry.container-registry-replaces-docker-registry %} If the Docker registry on {% data variables.location.product_location %} contains images, you must manually migrate the images to the {% data variables.product.prodname_container_registry %}.

{% ifversion ghes %}

>[!NOTE] {% data reusables.package_registry.container-registry-ghes-migration-availability %}

{% endif %}

{% data reusables.package_registry.container-registry-migration-namespaces %} For more information about the impact of migration to the {% data variables.product.prodname_container_registry %}, see [AUTOTITLE](/packages/working-with-a-github-packages-registry/migrating-to-the-container-registry-from-the-docker-registry#about-migration-from-the-docker-registry).

## Migrating organizations to the {% data variables.product.prodname_container_registry %}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -53,16 +53,15 @@ When {% data variables.product.prodname_github_connect %} is enabled, a record o
### Data transmitted when {% data variables.product.prodname_github_connect %} is enabled

When you enable {% data variables.product.prodname_github_connect %} or specific {% data variables.product.prodname_github_connect %} features, a record on {% data variables.product.prodname_ghe_cloud %} stores the following information about the connection.
{% ifversion ghes %}
* The public key portion of your {% data variables.product.prodname_ghe_server %} license
* A hash of your {% data variables.product.prodname_ghe_server %} license
* The customer name on your {% data variables.product.prodname_ghe_server %} license
* The version of {% data variables.location.product_location_enterprise %}{% endif %}
* The version of {% data variables.location.product_location_enterprise %}
* The hostname of {% data variables.location.product_location %}
* The enterprise account on {% data variables.product.prodname_ghe_cloud %} that's connected to {% data variables.location.product_location %}
* The authentication token that's used by {% data variables.location.product_location %} to make requests to {% data variables.product.prodname_ghe_cloud %}
* If Transport Layer Security (TLS) is enabled and configured on {% data variables.location.product_location %}{% ifversion ghes %}
* The {% data variables.product.prodname_github_connect %} features that are enabled on {% data variables.location.product_location %}, and the date and time of enablement{% endif %}
* If Transport Layer Security (TLS) is enabled and configured on {% data variables.location.product_location %}
* The {% data variables.product.prodname_github_connect %} features that are enabled on {% data variables.location.product_location %}, and the date and time of enablement
* The dormancy threshold for your enterprise
* The number of dormant users for your enterprise
* A count of {% ifversion enterprise-licensing-language %}consumed licenses{% else %}license-consuming seats{% endif %}, which does not include suspended users
Expand All @@ -75,12 +74,8 @@ Additional data is transmitted if you enable individual features of {% data vari

| Feature | Data | Which way does the data flow? | Where is the data used? |
| ------- | ---- | --------- | ------ |
| {% ifversion ghes %} |
| Automatic user license sync | Each {% data variables.product.prodname_ghe_server %} user's user ID and email addresses{% ifversion ghas-in-license-sync %}, and whether the user consumes a license for {% data variables.product.prodname_GH_advanced_security %}{% endif %} | From {% data variables.product.prodname_ghe_server %} to {% data variables.product.prodname_ghe_cloud %} | {% data variables.product.prodname_ghe_cloud %} |
| {% endif %} |
| {% ifversion ghes %} |
| {% data variables.product.prodname_dependabot_alerts %} | Vulnerability alerts | From {% data variables.product.prodname_dotcom_the_website %} to {% data variables.product.prodname_ghe_server %} | {% data variables.product.prodname_ghe_server %} |
| {% endif %} |
| {% data variables.product.prodname_dependabot_updates %} | Dependencies and the metadata for each dependency's repository<br><br>If a dependency is stored in a private repository on {% data variables.product.prodname_dotcom_the_website %}, data will only be transmitted if {% data variables.product.prodname_dependabot %} is configured and authorized to access that repository. | From {% data variables.product.prodname_dotcom_the_website %} to {% data variables.product.prodname_ghe_server %} | {% data variables.product.prodname_ghe_server %} |
| {% data variables.product.prodname_dotcom_the_website %} actions | Name of action, action (YAML file from {% data variables.product.prodname_marketplace %}) | From {% data variables.product.prodname_dotcom_the_website %} to {% data variables.product.prodname_ghe_server %}<br><br>From {% data variables.product.prodname_ghe_server %} to {% data variables.product.prodname_dotcom_the_website %} | {% data variables.product.prodname_ghe_server %} |
| {% data variables.product.prodname_server_statistics %} | Aggregate metrics about your usage of {% data variables.product.prodname_ghe_server %}. For the complete list of metrics, see [AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/about-server-statistics#server-statistics-data-collected). | From {% data variables.product.prodname_ghe_server %} to {% data variables.product.prodname_ghe_cloud %} | {% data variables.product.prodname_ghe_cloud %} |
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -25,14 +25,12 @@ topics:

## About {% data variables.product.prodname_dependabot %} for {% data variables.product.prodname_ghe_server %}

{% data variables.product.prodname_dependabot %} helps users find and fix vulnerabilities in their dependencies.{% ifversion ghes %} You {% ifversion dependabot-alerts-ghes-enablement %} must first set up {% data variables.product.prodname_dependabot %} for your enterprise, and then you {% endif %} can enable {% data variables.product.prodname_dependabot_alerts %} to notify users about vulnerable dependencies and {% data variables.product.prodname_dependabot_updates %} to fix the vulnerabilities and keep dependencies updated to the latest version.
{% data variables.product.prodname_dependabot %} helps users find and fix vulnerabilities in their dependencies. You {% ifversion dependabot-alerts-ghes-enablement %} must first set up {% data variables.product.prodname_dependabot %} for your enterprise, and then you {% endif %} can enable {% data variables.product.prodname_dependabot_alerts %} to notify users about vulnerable dependencies and {% data variables.product.prodname_dependabot_updates %} to fix the vulnerabilities and keep dependencies updated to the latest version.

{% data variables.product.prodname_dependabot %} is just one of many features available to harden supply chain security for {% data variables.product.prodname_dotcom %}. For more information about the other features, see [AUTOTITLE](/admin/code-security/managing-supply-chain-security-for-your-enterprise/about-supply-chain-security-for-your-enterprise).

### About {% data variables.product.prodname_dependabot_alerts %}

{% endif %}

With {% data variables.product.prodname_dependabot_alerts %}, {% data variables.product.prodname_dotcom %} identifies insecure dependencies in repositories and creates alerts on {% data variables.product.prodname_ghe_server %}, using data from the {% data variables.product.prodname_advisory_database %} and the dependency graph service.

{% data reusables.repositories.tracks-vulnerabilities %}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -32,12 +32,8 @@ When a proxy server is enabled for {% data variables.location.product_location %

You can configure an outbound proxy server {% data variables.location.product_location %}, and you can configure exceptions for connections to specific domains.

{% ifversion ghes %}

Your instance validates the hostnames for proxy exclusion using the list of IANA's registered top-level domains (TLDs). For more information, see the [list of TLDs](https://data.iana.org/TLD/tlds-alpha-by-domain.txt) on the IANA website.

{% endif %}

{% data reusables.enterprise_site_admin_settings.access-settings %}
{% data reusables.enterprise_site_admin_settings.management-console %}
{% data reusables.enterprise_management_console.privacy %}
Expand Down
Loading