Skip to content

Update GitLab OIDC to SAML by default #102

Closed
@Racer159

Description

@Racer159

Is your feature request related to a problem? Please describe.

As Ezra I want SAML to be the default GitLab auth so that I can have a more secure default for larger environments.

Describe the solution you'd like

  • Given I specify SSO to be on within the GitLab package
  • And provide no additional bundle overrides
  • When I deploy the package to the cluster
  • Then GitLab will be configured to connect to Keycloak over SAML.

Describe alternatives you've considered

We could leave it as is with OIDC but this is less secure: https://github.com/defenseunicorns/uds-package-gitlab/blob/main/adr/0002-keycloak-integration.md#decision

Additional context

This should minimize breakage for consumers - an option to keep OIDC for those that have / want it should be considered.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions