gitlabhq/gitlabhq — Issue #486: Do not allow the key used to access the gitolite-admin repo to ever be used as a deployment key
Author: owindsor
Created: 2012-02-29 05:14:14+00:00
State: open

First up - Thanks for the awesome project - I came from gitorious and so far we are really enjoying things.

Here is the problem, As silly as this sounds, here is the way it happened

On my host, I have a gitlab repo that contains some internal only changes that I want in the repo, but also want to be able to update the running host with.

Anyways, rather than allow apache the ability to read/write to the gitlab repo, I put his key (which is also able to write the gitolite-admin repo) in as a deploy user. I could then check out locally and update my running system with the code stored in gitlab ie;

git pull git@localhost:gitlabhq.git

This results in gitlab no longer being able to make changes to the gitolite-admin repo via what I assume is a key match of R that overrides the core RW.

Please let me know if this is not clear

Cheers