Skip to content

Automatically create subdomain `<group>.gitlab-apps.com`

Description

Auto DevOps and our Kubernetes integration is awesome and getting better, but managing a wildcard DNS is still a bit of a pain and a hurdle people need to cross before they can make full use of Auto DevOps. We should provide domains for people automatically.

Proposal

  • Automatically create subdomain such as <group>.gitlab-apps.com
  • Automatically create static IP and Let's Encrypt for *.<group>.gitlab-apps.com
  • Get Let's Encrypt to raise the limits on gitlab-apps.com.

Questions/Notes/Concerns

  • We might need to worry about cookies and the possibility that someone could (mis)configure their app to be susceptible to another subdomain setting a base domain cookie.
  • Currently, Auto DevOps expects Let's Encrypt to be set up on your cluster. I don't know how we'd safely provide our ACME ID for this use.
  • EE customer may want to provide this as well, but they might be able to get away without using subdomains, so existing AUTO_DEVOPS_DOMAIN may be sufficient.

Links / references

Documentation blurb

Overview

What is it? Why should someone use this feature? What is the underlying (business) problem? How do you use this feature?

Use cases

Who is this for? Provide one or more use cases.

Feature checklist

Make sure these are completed before closing the issue, with a link to the relevant commit.