Skip to content

Draft: Adds camoproxy to GET in order to provide an asset proxy

Graeme Gillies requested to merge ggillies/add-camoproxy into main

What does this MR do?

Part of gitlab#356044

Following the instructions at https://docs.gitlab.com/ee/security/asset_proxy.html as well as going off how we deploy an assetproxy for Gitlab.com, this change adds the third party go-camoproxy component and configures the GET environment to use it.

It requires that the camoproxy instance have an external IP address and DNS name in order to work.

Related issues

gitlab#356044

Author's checklist

When ready for review, the Author applies the workflowready for review label and mention @gl-quality/get-maintainers:

  • Merge request:
    • Corresponding Issue raised and reviewed by the GET maintainers team.
    • Merge Request Title and Description are up to date, accurate, and descriptive
    • MR targeting the appropriate branch
    • MR has a green pipeline
    • MR has no new security alerts in the widget from the Secret Detection and IaC Scan (SAST) jobs.
  • Code:
    • Check the area changed works as expected. Consider testing it in different environment sizes (1k,3k,10k,etc.).
    • Documentation created/updated in the same MR.
    • If this MR adds an optional configuration - check that all permutations continue to work.
    • For Terraform changes: setup a previous version environment, then run a terraform plan with your new changes and ensure nothing will be destroyed. If anything will be destroyed and this can't be avoided please add a comment to the current MR.
  • Create any follow-up issue(s) to support the new feature across other supported cloud providers or advanced configurations. Create 1 issue for each provider/configuration. Contact the Quality Enablement team if unsure.

Merge request reports