Merge branch 'stkerr-removal-ssh-optional-enforcement' into 'master'

Removal entry for SSH optional enforcement See merge request gitlab-org/gitlab!84088

Merge branch 'stkerr-removal-ssh-optional-enforcement' into 'master'
Removal entry for SSH optional enforcement See merge request gitlab-org/gitlab!84088
7a579403 · Evan Read · 6916e6cf · 0a88f49f · 7a579403 · 7a579403
--- a/data/removals/15_0/removal_manage_ssh_expiration.yml
+++ b/data/removals/15_0/removal_manage_ssh_expiration.yml
+- name: "Optional enforcement of SSH expiration"
+  announcement_milestone: "14.8"
+  announcement_date: "2022-02-22"
+  removal_milestone: "15.0"
+  removal_date: "2022-05-22"
+  breaking_change: true
+  reporter: stkerr
+  body: |
+    Disabling SSH expiration enforcement is unusual from a security perspective and could create unusual situations where an expired
+    key is unintentionally able to be used. Unexpected behavior in a security feature is inherently dangerous and so now we enforce
+    expiration on all SSH keys.
+  issue_url: "https://gitlab.com/gitlab-org/gitlab/-/issues/351963"
+  documentation_url: "https://docs.gitlab.com/ee/user/admin_area/settings/account_and_limit_settings.html#allow-expired-ssh-keys-to-be-used-deprecated"
--- a/doc/update/removals.md
+++ b/doc/update/removals.md
@@ -228,6 +228,18 @@ GitLab no longer supports OAuth tokens [without an expiration](https://docs.gitl

 Any existing token without an expiration has one automatically generated and applied.

+### Optional enforcement of SSH expiration
+
+WARNING:
+This feature was changed or removed in 15.0
+as a [breaking change](https://docs.gitlab.com/ee/development/contributing/#breaking-changes).
+Before updating GitLab, review the details carefully to determine if you need to make any
+changes to your code, settings, or workflow.
+
+Disabling SSH expiration enforcement is unusual from a security perspective and could create unusual situations where an expired
+key is unintentionally able to be used. Unexpected behavior in a security feature is inherently dangerous and so now we enforce
+expiration on all SSH keys.
+
 ### Remove Versions from PackageType

 WARNING: