Skip to content

Update GitLab OIDC to SAML by default #102

Closed
@Racer159

Description

Is your feature request related to a problem? Please describe.

As Ezra I want SAML to be the default GitLab auth so that I can have a more secure default for larger environments.

Describe the solution you'd like

  • Given I specify SSO to be on within the GitLab package
  • And provide no additional bundle overrides
  • When I deploy the package to the cluster
  • Then GitLab will be configured to connect to Keycloak over SAML.

Describe alternatives you've considered

We could leave it as is with OIDC but this is less secure: https://github.com/defenseunicorns/uds-package-gitlab/blob/main/adr/0002-keycloak-integration.md#decision

Additional context

This should minimize breakage for consumers - an option to keep OIDC for those that have / want it should be considered.

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions