Investigate why gitlab is sending warnings about new sign ons from internal IPs
Audience
Define what is needed, why is needed and by whom As a user, I want gitlab-apertispro.boschdevcloud.com to not send me spurious emails about a sign on from a location that can only be internal to the apertispro network, so that my confusion is reduced, and I am less likely to ignore real security warnings.
Background
I received the following email:
Hi EXTERNAL [REDACTED]! A sign-in to your account has been made from the following IP address: 10.244.4.29 If you recently signed in and recognize the IP address, you may disregard this email. If you did not recently sign in, you should immediately change your password: https://docs.gitlab.com/ee/user/profile/#changing-your-password. Passwords should be unique and not used for any other sites or services. To further protect your account, consider configuring a two-factor authentication method: https://docs.gitlab.com/ee/user/profile/account/two_factor_authentication.html.
--You're receiving this email because of your account on gitlab-apertispro.boschdevcloud.com.
This was send immediately after I clicked on a link to a page on this gitlab, which I accessed via SSO (I do not have a password set, I used a PAT for repository access). I am not on the internal network, or any kind of VPN, so this IP cannot possibly legitimately represent my own IP.
Due date
Any specific due date for resolving this task?
Dependencies
External dependencies which are not tasks. Dependencies on other tasks should be added a blockers instead.
Acceptance criteria
add the high-level goals you want to complete [] The cause of the email has been identified. [] A task has been created to rectify the issue, which is now understood, and can be at least broadly scoped.
Out of scope
List of items that are specifically not in scope, there should normally be at least one listed
- Fixing the problem is not in scope.
Outcomes
List here the products and results of this task once completed
Followup activities
The next steps once this task is completed
Management data
This section is for management only, it should be the last one in the description.
Phabricator link: https://phabricator.apertis.org/T9479