gitaly-fips

Gitaly is a Git RPC service for handling all the Git calls made by GitLab.

Download this Image

The image is available on cgr.dev:

docker pull cgr.dev/chainguard-private/gitaly:latest

Usage

Please refer to the following helm chart documentation for instructions on how to deploy GitLab in Kubernetes: see here.

The GitLab helm chart is composed of multiple sub-charts, one of which deploys the GitLab shell component.

Step 1: Pull down the source

The upstream Gitlab Helm repo contains custom values for deploying a compatible kind cluster, as well as values files for the helm chat to deploy with SSL disabled:

git clone https://gitlab.com/gitlab-org/charts/gitlab.git && cd gitlab

Step 2: Create new kind cluster#

This needs to be run from the root of the gitlab repo, step 1

kind create cluster --config examples/kind/kind-no-ssl.yaml

Step 3: Create default password

Creates a secret containing a default password for the root user, which we’ll need to pass into the helm chart:

kubectl create secret generic gitlab-gitlab-initial-root-password --from-literal=password='P@ssw3rd'

Step 4: Identify your public IP#

export MY_IP_ADDRESS=$(ipconfig getifaddr en0)

Step 5: Add the Gitlab helm repo#

helm repo add gitlab https://charts.gitlab.io/

Step 6: Deploy Gitlab helm chart!#

helm upgrade --install gitlab gitlab/gitlab \
  --set global.gitlab.hostnameOverride=gitlab.cluster.local \
  --set global.externalIP=$MY_IP_ADDRESS.nip.io \
  --set gitlab.gitlab-root-password.secret=gitlab-gitlab-initial-root-password \
  -f examples/kind/values-base.yaml \
  -f examples/kind/values-no-ssl.yaml \
  --set gitlab.gitaly.image.repository=cgr.dev/chainguard-private/gitaly \
  --set gitlab.gitaly.image.tag=latest 
  --set global.workhorse.host=gitlab-webservice-default

Also, you can find the installation parameters related to the gitaly sub-chart here.