Commit 17b37bf1 authored by Thong Kuah's avatar Thong Kuah
Browse files

Add GOB to cross-cloud dependency allow-list

parent 46180fa3
Loading
Loading
Loading
Loading
+1
Changes for content/handbook/engineering/architecture/design-documents/cells/decisions/027_cross_cloud_dependency_allow_list.md: 1 added line, 0 removed lines.
Original line number Diff line number Diff line
@@ -48,6 +48,7 @@ An entry may be added to the allow-list only if all of the following hold:
| AWS Cell → Artifact Registry | Only deployed in GCP | Artifact Registry | [Cellular Target](../../artifact_registry/decisions/024_infrastructure_delivery.md#phase-2--cellular-target) |
| AWS Cell → Secrets Manager | Only deployed in GCP | Secrets Manager | [Cellular Target](https://gitlab.com/groups/gitlab-org/-/work_items/17846) |
| AWS S3 → GCP Elastic Agent (OIDC workload identity) | Cells log ingestion to centrally-operated Elasticsearch | Security Logging | Per-cloud log sink, if/when justified |
| AWS Cell → GCP GitLab Observability Backend (GOB) | Single centrally-hosted backend behind a hardcoded `observe.gitlab.com` URL (`lib/gitlab/observability.rb`); telemetry is stored externally keyed by project/group, with OAuth scoped per root ancestor group, so it behaves like an external SaaS with no Cell or Org awareness | Observability | Per-cell Observability Backend, tracked in [gitlab#606874](https://gitlab.com/gitlab-org/gitlab/-/work_items/606874) |

Any dependency not in this table must be contained within a single cloud.