Merge branch 'sh-ensure-path-to-binstubs' into 'master'

See merge request gitlab-org/build/CNG!839

Update ruby to 2.7.5

See merge request gitlab-org/security/charts/components/images!7

Bump container registry to v3.15.0

See merge request gitlab-org/build/CNG!825

Gitaly: make debian multi-stage

See merge request gitlab-org/build/CNG!824

[CI] Add job to run issue-bot

Closes gitlab-org/distribution/team-tasks#906

See merge request gitlab-org/build/CNG!821

Reinstate sidekiq-cluster wrapper script

See merge request gitlab-org/build/CNG!819

Bump container registry to v3.14.3

See merge request gitlab-org/build/CNG!823

While we do not run more than 1 Sidekiq worker process,
we are moving the metrics server out of the Sidekiq
worker processes and into a sidecar,
which in turn is supervised by sidekiq-cluster:

https://gitlab.com/groups/gitlab-org/-/epics/6409

For reasons of simplicity, we therefore start a
single-worker "cluster".

Add support for kerberos to gitlab-rails

See merge request gitlab-org/build/CNG!734

Co-authored-by: Marin Hannache <mareo@cri.epita.fr>
Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space>
Signed-off-by: Marin Hannache <mareo@cri.epita.fr>

Docs: Update build.md with dependency graph

See merge request gitlab-org/build/CNG!814

Bump container registry to v3.14.2

See merge request gitlab-org/build/CNG!815

GitLab Logger to v1.3.1

See merge request gitlab-org/build/CNG!805

Raise Sidekiq job timeout from 4 to 25 seconds

See merge request gitlab-org/build/CNG!813

Deps.io: Update maintainers list

See merge request gitlab-org/build/CNG!810

ubi8: Install Ruby binstubs for Gitaly gems

See merge request gitlab-org/build/CNG!808

As described in https://github.com/mperham/sidekiq/wiki/Signals#term,
Sidekiq by default will wait 25 seconds for jobs to terminate after
receiving a TERM signal. The current default of 4 seconds is a bit too
low. Although this value is actually set in Charts, we are setting in
the containers to be consistent.

The change mirrors the Charts update in
https://gitlab.com/gitlab-org/charts/gitlab/-/merge_requests/2249.

Set PATH to ensure Gitaly can run these binaries.

Ruby gems such as `gitlab-linguist` install binstubs
(https://bundler.io/v2.2/man/bundle-binstubs.1.html) that need to be
available on the Gitaly nodes. Regular images don't have this issue
because /usr/bin is used directly, but UBI8 images copy only the
binaries they need.

When binstubs are manually installed, bundler appears to need write
access to the target destination, or odd permission errors result. We
install these binstubs in `/home/git/bin`, which appears to be in the
user's PATH, to ensure the user can own these binaries.

Relates to https://gitlab.com/gitlab-org/charts/gitlab/-/issues/2950

Changelog: fixed

Bump container registry to v3.14.1

See merge request gitlab-org/build/CNG!812

Bump Container Registry to v3.14.0-gitlab

See merge request gitlab-org/build/CNG!811