Skip to content

Gitaly HTTP client should specify TLSClientConfig to support mutual TLS auth

Gitaly currently doesn't specify a TLSClientConfig for the HTTP client used to make requests to the GitLab internal API. This prevents interoperation with services that require mutual TLS auth (e.g. nginx). The non-gRPC clients in Gitaly should be updated to use the configured Gitaly certificates for client connections.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information