You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
📚 Sync docs from alaudadevops/gitlab-ce-operator on 31bc01dcba1d99f06da68d23e9e3fd6ed9b8f18e
Source: docs(upgrade): add shared memory volume mount configuration to the all-in-one pod (#261)
Author: nanjingfm
Ref: refs/heads/release-18.2
Commit: 31bc01dcba1d99f06da68d23e9e3fd6ed9b8f18e
This commit automatically syncs documentation changes from the source-docs repository.
🔗 View source commit: AlaudaDevops/gitlab-ce-operator@31bc01d
🤖 Synced on 2025-11-04 05:51:42 UTC
Copy file name to clipboardExpand all lines: docs/en/install/03_gitlab_deploy.mdx
+18-5Lines changed: 18 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -610,18 +610,27 @@ Create the following Oauth2Client resource in the global cluster to register the
610
610
apiVersion: dex.coreos.com/v1
611
611
kind: OAuth2Client
612
612
name: OIDC
613
+
id: gitlab-dex # Client ID
614
+
secret: Z2l0bGFiLW9mZmljaWFsLTAK # Client secret
615
+
redirectURIs:
616
+
- <gitlab-host>/users/auth/dex/callback # GitLab authentication callback address, where <gitlab-host> is replaced with the GitLab instance access address
613
617
metadata:
614
618
name: m5uxi3dbmiwwizlyzpzjzzeeeirsk # This value is calculated based on the hash of the id field, online calculator: https://go.dev/play/p/QsoqUohsKok
615
619
namespace: cpaas-system
616
620
alignPasswordDB: true
617
-
id: gitlab-dex # Client ID
618
621
public: false
619
-
redirectURIs:
620
-
- <gitlab-host>/users/auth/dex/callback # GitLab authentication callback address, where <gitlab-host> is replaced with the GitLab instance access address
621
-
secret: Z2l0bGFiLW9mZmljaWFsLTAK # Client secret
622
622
spec: {}
623
623
```
624
624
625
+
| Field | Description | Example |
626
+
|-------|-------------|---------|
627
+
|name| The display name of the resource. | OIDC|
628
+
|id| The client ID for SSO authentication. Any value is allowed, except alauda-dex, which is reserved and may cause conflicts.| gitlab-dex |
629
+
|secret| The client secret used for SSO authentication. Can be set to any value. | Z2l0bGFiLW9mZmljaWFsLTAK|
|metadata.name| The resource name, which must be calculated based on the hash of the `id` field. You can use online hash calculators such as https://go.dev/play/p/QsoqUohsKok to generate it. | m5uxi3dbmiwwizlyzpzjzzeeeirsk |
632
+
|metadata.namespace| The platform system namespace, Must be `cpaas-system`. | cpaas-system|
633
+
625
634
Prepare the configuration content according to the comments in the JSON below.
626
635
627
636
```yaml
@@ -684,10 +693,14 @@ If the platform is accessed via HTTPS and uses a self-signed certificate, you ne
684
693
685
694
In the `cpaas-system` namespace of the global cluster, find the secret named `dex.tls`, get the `ca.crt` content from the secret, save it as a new secret, and create it in the namespace of the GitLab instance.
686
695
696
+
:::warning Certificate Format
697
+
The certificate must be in PEM format.
698
+
:::
699
+
687
700
```yaml
688
701
apiVersion: v1
689
702
data:
690
-
ca.crt: <base64encode data>
703
+
ca.crt: <base64-encode a PEM-formatted certificate>
0 commit comments