Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
68fbc9d0
Commit
68fbc9d0
authored
Dec 03, 2020
by
James Ramsay
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Gitaly Cluster TLS doc fixes
parent
a3083266
Changes
1
Show whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
10 additions
and
7 deletions
+10
-7
doc/administration/gitaly/praefect.md
doc/administration/gitaly/praefect.md
+10
-7
No files found.
doc/administration/gitaly/praefect.md
View file @
68fbc9d0
...
...
@@ -498,6 +498,7 @@ To configure Praefect with TLS:
**For Omnibus GitLab**
1.
Create certificates for Praefect servers.
1.
On the Praefect servers, create the
`/etc/gitlab/ssl`
directory and copy your key
and certificate there:
...
...
@@ -516,7 +517,8 @@ To configure Praefect with TLS:
praefect
[
'key_path'
]
=
"/etc/gitlab/ssl/key.pem"
```
1.
Save the file and
[
reconfigure GitLab
](
../restart_gitlab.md#omnibus-gitlab-reconfigure
)
.
1.
Save the file and
[
reconfigure
](
../restart_gitlab.md#omnibus-gitlab-reconfigure
)
.
1.
On the Praefect clients (including each Gitaly server), copy the certificates,
or their certificate authority, into
`/etc/gitlab/trusted-certs`
:
...
...
@@ -529,8 +531,10 @@ To configure Praefect with TLS:
```
ruby
git_data_dirs
({
'default'
=>
{
'gitaly_address'
=>
'tls://praefect1.internal:3305'
},
'storage1'
=>
{
'gitaly_address'
=>
'tls://praefect2.internal:3305'
},
"default"
=>
{
"gitaly_address"
=>
'tls://LOAD_BALANCER_SERVER_ADDRESS:2305'
,
"gitaly_token"
=>
'PRAEFECT_EXTERNAL_TOKEN'
}
})
```
...
...
@@ -565,10 +569,7 @@ To configure Praefect with TLS:
repositories
:
storages
:
default
:
gitaly_address
:
tls://praefect1.internal:3305
path
:
/some/local/path
storage1
:
gitaly_address
:
tls://praefect2.internal:3305
gitaly_address
:
tls://LOAD_BALANCER_SERVER_ADDRESS:3305
path
:
/some/local/path
```
...
...
@@ -834,6 +835,8 @@ Particular attention should be shown to:
balancer.
-
`PRAEFECT_EXTERNAL_TOKEN`
with the real secret
If you are using TLS, the
`gitaly_address`
should begin with
`tls://`
.
```
ruby
git_data_dirs
({
"default"
=>
{
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment