Add a Geo with SAML configuration check in the Geo check task
Proposal
In rake gitlab:geo:check
, add a check that looks like:
Passing
Checking Geo ...
GitLab Geo is available ... yes
GitLab Geo is enabled ... yes
<snip>
SAML provider does not specify assertion_consumer_service_url ... yes
Checking Geo ... Finished
Failing
Checking Geo ...
GitLab Geo is available ... yes
GitLab Geo is enabled ... yes
<snip>
SAML provider does not specify assertion_consumer_service_url ... no
Try fixing it:
Delete the assertion_consumer_service_url attribute from `gitlab_rails["omniauth_providers"]`.
For more information, see https://docs.gitlab.com/ee/administration/geo/replication/single_sign_on.html.
Checking Geo ... Finished
- The check should only run on primary sites which have a SAML omniauth provider.
- The check description sounds awkward because it uses the words
does not
, but the desired state is a lack of assertion_consumer_service_url in the config. Any wording ideas welcome.