Skip to content

Add TLS support to Praefect

Hossein Pursultani requested to merge 2306-praefect-tls-support into master

What does this MR do?

This MR enables TLS support for Praefect chart. Praefect can communicate over TLS with both Gitaly and client nodes.

See the doc/charts/gitlab/praefect/index.md#running-praefect-over-tls for setup instructions. Use scripts/generate_certificates.sh <gitaly|praefect> to generate TLS key and certificate for testing.

This MR also touches a limited number of Gitaly helpers.

Related issues

Closes #2306 (closed)

Checklist

See Definition of done.

For anything in this list which will not be completed, please provide a reason in the MR discussion.

Required

  • Merge Request Title and Description are up to date, accurate, and descriptive
  • MR targeting the appropriate branch
  • MR has a green pipeline on GitLab.com

Expected (please provide an explanation if not completing)

  • Test plan indicating conditions for success has been posted and passes
  • Documentation created/updated
  • Tests added
  • Integration tests added to GitLab QA
  • Equivalent MR/issue for omnibus-gitlab opened

Closes #2306 (closed)

Edited by Hossein Pursultani

Merge request reports