Add comment on creator_id on Deploy Tokens

acc70b69 · Shinya Maeda · Nikola Milojevic · 1b5ea408 · acc70b69
Commit acc70b69 authored Apr 14, 2022 by Shinya Maeda Committed by Nikola Milojevic Apr 15, 2022
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

app/models/deploy_token.rb app/models/deploy_token.rb +3 -0

No files found.
--- a/app/models/deploy_token.rb
+++ b/app/models/deploy_token.rb
@@ -14,6 +14,9 @@ class DeployToken < ApplicationRecord

  default_value_for(:expires_at) { Forever.date }

+  # Do NOT use this `user` for the authentication/authorization of the deploy tokens.
+  # It's for the auditing purpose on Credential Inventory, only.
+  # See https://gitlab.com/gitlab-org/gitlab/-/issues/353467#note_859774246 for more information.
  belongs_to :user, foreign_key: :creator_id, optional: true

  has_many :project_deploy_tokens, inverse_of: :deploy_token