GitLab Helm Chart

Note: The chart is currently beta, if you encounter any problems please open an issue.

For more information on available GitLab Helm Charts, please see our overview.

Introduction

The gitlab chart is the best way to operate GitLab on Kubernetes. This chart contains all the required components to get started, and can scale to large deployments.

The default deployment includes:

• Core GitLab components: Unicorn, Shell, Workhorse, Registry, Sidekiq, and Gitaly
• Optional dependencies: Postgres, Redis, Minio
• An auto-scaling, unprivileged GitLab Runner using the Kubernetes executor
• Automatically provisioned SSL via Let's Encrypt.

Limitations

Some features and functions are not currently available in the beta release:

• GitLab Pages
• Reply by email
• Project templates
• Project import/export
• Geo

Currently out of scope:

• Mattermost
• MySQL support

Prerequisites

In order to deploy GitLab on Kubernetes, a few prerequisites are required.

1. helm and kubectl installed on your computer.
2. A Kubernetes cluster, version 1.8 or higher. 6vCPU and 16GB of RAM is recommended.

• Google GKE
• Amazon EKS
• Microsoft AKS

1. A wildcard DNS entry and external IP address
2. Authenticate and connect to the cluster
3. Configure and initialize Helm Tiller.

Configuring and Installing GitLab

Note: For deployments to Amazon EKS, there are additional configuration requirements.

For simple deployments, running all services within Kubernetes, only three parameters are required:

• global.hosts.domain: the base domain of the wildcard host entry. For example, mycompany.io if the wild card entry is *.mycompany.io.
• global.hosts.externalIP: the external IP which the wildcard DNS resolves to.
• certmanager-issuer.email: Email address to use when requesting new SSL certificates from Let's Encrypt.

For enterprise deployments, or to utilize advanced settings, please use the instructions in the gitlab chart project for the most up to date directions.

• External Postgres, Redis, and other dependencies
• Persistence settings
• Manual TLS certificates
• Manual secret creation

For additional configuration options, consult the full list of settings.

Installing GitLab using the Helm Chart

Once you have all of your configuration options collected, we can get any dependencies and run helm. In this example, we've named our helm release "gitlab".

helm repo add gitlab https://charts.gitlab.io/
helm update
helm upgrade --install gitlab gitlab/gitlab \
  --timeout 600 \
  --set global.hosts.domain=example.local \
  --set global.hosts.externalIP=10.10.10.10 \
  --set certmanager-issuer.email=me@example.local

Monitoring the Deployment

This will output the list of resources installed once the deployment finishes which may take 5-10 minutes.

The status of the deployment can be checked by running helm status gitlab which can also be done while the deployment is taking place if you run the command in another terminal.

Initial login

You can access the GitLab instance by visiting the domain name beginning with gitlab. followed by the domain specified during installation. From the example above, the URL would be https://gitlab.example.local.

If you manually created the secret for initial root password, you can use that to sign in as root user. If not, Gitlab automatically created a random password for root user. This can be extracted by the following command (replace <name> by name of the release - which is gitlab if you used the command above).

kubectl get secret <name>-gitlab-initial-root-password -ojsonpath={.data.password} | base64 --decode

Outgoing email

By default outgoing email is disabled. To enable it, provide details for your SMTP server using the global.smtp and global.email settings. You can find details for these settings in the command line options.

If your SMTP server requires authentication make sure to read the section on providing your password in the secrets documentation. You can disable authentication settings with --set global.smtp.authentication="".

If your Kubernetes cluster is on GKE, be aware that smtp ports 25, 465, and 587 are blocked.

Deploying the Community Edition

To deploy the Community Edition, include these options in your helm install command:

--set gitlab.migrations.image.repository=registry.gitlab.com/gitlab-org/build/cng/gitlab-rails-ce
--set gitlab.sidekiq.image.repository=registry.gitlab.com/gitlab-org/build/cng/gitlab-sidekiq-ce
--set gitlab.unicorn.image.repository=registry.gitlab.com/gitlab-org/build/cng/gitlab-unicorn-ce

Updating GitLab using the Helm Chart

Once your GitLab Chart is installed, configuration changes and chart updates should be done using helm upgrade:

helm upgrade -f values.yaml gitlab gitlab/gitlab

Uninstalling GitLab using the Helm Chart

To uninstall the GitLab Chart, run the following:

helm delete gitlab