gitlab-workhorse-ee-fips

Download this Image

The image is available on cgr.dev:

docker pull cgr.dev/chainguard/gitlab-workhorse-ee:latest

Please refer to the helm chart documentation here for instructions on how to deploy GitLab in Kubernetes.

The GitLab helm chart, is composed of multiple sub-charts. The sub-chart for GitLab Webservice deploys GitLab Workhorse.

Below is an example of how to deploy the helm chart, using the Chainguard image for GitLab Workhorse. Note, it is not intended to be a replacement for the official documentation:

REPO_NAME="gitlab"
REPO_URL="https://charts.gitlab.io"

# The below variables are placeholders and should be set as per the user's specific environment
DOMAIN="example.com.nip.io"
EXTERNAL_IP="203.0.113.1"
ROOT_PASSWORD="<your root password>"

helm repo add gitlab https://charts.gitlab.io/
helm repo update

kubectl create secret generic gitlab-gitlab-initial-root-password --from-literal=password='P@ssw3rd'

git clone https://gitlab.com/gitlab-org/charts/gitlab.git --depth 1

helm upgrade --install gitlab gitlab/gitlab \
  --set global.hosts.domain=$DOMAIN \
  --set global.gitlab.hostnameOverride=gitlab.cluster.local \
  --set global.externalIP=$EXTERNAL_IP \
  --set gitlab.gitlab-root-password.secret=gitlab-gitlab-initial-root-password \
  -f examples/kind/values-base.yaml \
  -f examples/kind/values-no-ssl.yaml \
  --set gitlab.webservice.workhorse.image=cgr.dev/chainguard/gitlab-workhorse-ee \
  --set gitlab.webservice.workhorse.tag=latest

Note: Replace the placeholders{DOMAIN, EXTERNAL_IP, ROOT_PASSWORD} & set image with Chainguard's latest.