Automate Access Requests with Gitlab Serverless functions

Problem to solve

Automate Access Requests with Gitlab Serverless functions

Intended users

GitLab: IT-Ops, People-Ops, Infra-OPs

Further details

Proposal

Automate as much as possible with existing Access Request system using Serverless functions. Potentially use a combination of Okta and BambooHR APIs to determine and coordinate access to various resources and accounts. The aim is to reduce the amount of manual work currently being done around access requests.

POC Scope (TBD/WIP):

• Trigger event based on GitLab issue creation
• Queries BambooHR API for access level (?)
• Leverage Okta as centralized source for granting access control
• Notifies relevant parties about when access is granted

Permissions and Security

Documentation

Testing

What does success look like, and how can we measure that?

What is the type of buyer?

Links / references

cc

@nagyv.gitlab, @danielgruesso