Add authentication management method to replace PATs with configuration file
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Problem to solve
The goal is to reduce dependency on and the exposure of PAT in pipelines by implementing a method of "authentication as code" The request would be to have a git repository which links SAML group links on groups within a customer group structure on GitLab.
An example of what a configuration file could look like:
saml_group_links:
-
group_id: 1
saml_links:-
ad_group_id: 11111111-1111-1111-1111-111111111111
access_level: maintainer -
ad_group_id: 11111111-1111-1111-1111-111111111112
access_level: owner
-
-
group_id: 2
saml_links:-
ad_group_id: 11111111-1111-1111-1111-111111111113
access_level: developer
-
The idea would be to monitor this repository/file, and when changes are made to the default branch, gitlab would make sure to make these links.
Edited by 🤖 GitLab Bot 🤖