Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
1
Merge Requests
1
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
nexedi
gitlab-ce
Commits
a2e959c6
Commit
a2e959c6
authored
Jul 24, 2020
by
Wayne Haber
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Updated language and readability
parent
2dbcb567
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
6 additions
and
6 deletions
+6
-6
doc/user/project/clusters/securing.md
doc/user/project/clusters/securing.md
+6
-6
No files found.
doc/user/project/clusters/securing.md
View file @
a2e959c6
...
...
@@ -9,7 +9,7 @@ info: To determine the technical writer assigned to the Stage/Group associated w
GitLab makes it easy to secure applications deployed in
[
connected Kubernetes clusters
](
index.md
)
.
You can benefit from the protection of a
[
Web Application Firewall
](
../../../topics/web_application_firewall/quick_start_guide.md
)
,
[
Network Policies
](
../../../topics/autodevops/stages.md#network-policy
)
,
or even
[
Container Host Security
](
../../clusters/applications.md#install-falco-using-gitlab-cicd
)
.
and
[
Container Host Security
](
../../clusters/applications.md#install-falco-using-gitlab-cicd
)
.
This page contains full end-to-end steps and instructions to connect your cluster to GitLab and
install these features, whether or not your applications are deployed through GitLab CI/CD. If you
...
...
@@ -25,7 +25,7 @@ At a high level, the required steps include the following:
-
Connect the cluster to GitLab.
-
Set up one or more runners.
-
Set up a cluster management project.
-
Install a Web Application Firewall, Network Policies, and/or Container Host
-
Install a Web Application Firewall,
and/or
Network Policies, and/or Container Host
Security.
-
Install Prometheus to get statistics and metrics in the
[
threat monitoring
](
../../application_security/threat_monitoring/
)
...
...
@@ -57,11 +57,11 @@ uses Sidekiq (a background processing service) to facilitate this.
```
Although this installation method is easier because it's a point-and-click action in the user
interface, it's inflexible and hard
to debug. When
something goes wrong, you can't see the
interface, it's inflexible and hard
er to debug. If
something goes wrong, you can't see the
deployment logs. The Web Application Firewall feature uses this installation method.
However, the next generation of GitLab Managed Apps V2 (
[
CI/CD-based GitLab Managed Apps
](
https://gitlab.com/groups/gitlab-org/-/epics/2103
)
)
don't use Sidekiq to deploy. All the applications are deployed using a GitLab CI/CD pipeline and
do
es
n't use Sidekiq to deploy. All the applications are deployed using a GitLab CI/CD pipeline and
therefore GitLab Runners.
```
mermaid
...
...
@@ -75,10 +75,10 @@ sequenceDiagram
```
Debugging is easier because you have access to the raw logs of these jobs (the Helm Tiller output is
available as an artifact in case of failure) and the flexibility is much better. Since these
available as an artifact in case of failure)
,
and the flexibility is much better. Since these
deployments are only triggered when a pipeline is running (most likely when there's a new commit in
the cluster management repository), every action has a paper trail and follows the classic merge
request workflow (approvals, merge, deploy). The Network Policy (Cilium) Managed App and Container
request workflow (approvals, merge, deploy). The Network Policy (Cilium) Managed App
,
and Container
Host Security (Falco) are deployed with this model.
## Connect the cluster to GitLab
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment