Closed
Description
Is your feature request related to a problem? Please describe.
As Ezra I want SAML to be the default GitLab auth so that I can have a more secure default for larger environments.
Describe the solution you'd like
- Given I specify SSO to be on within the GitLab package
- And provide no additional bundle overrides
- When I deploy the package to the cluster
- Then GitLab will be configured to connect to Keycloak over SAML.
Describe alternatives you've considered
We could leave it as is with OIDC but this is less secure: https://github.com/defenseunicorns/uds-package-gitlab/blob/main/adr/0002-keycloak-integration.md#decision
Additional context
This should minimize breakage for consumers - an option to keep OIDC for those that have / want it should be considered.