GitLab External LDAP

[tobiasReichel]

Hey Everyone,

so I'm using jump cloud as my LDAP service and now I want to change the LDAP settings for GitLab it works but it gets overwritten every time the container restart

how can I change that I don't see an obvious way?

any other ideas than deploying my own container in cloudron?

[BrutalBirdie]

@tobiasReichel
I have a similar problem currently with the matrix server app, if someone wants to use an external turn server it gets overwritten on every start.

Currently gitlab behaves the same.

I was thinking about a solution where the normal startup script is default but if a custom startup script / scripts are provided it should run the custom ones.
That would be a solution but requires a lot.. all apps to be updated with this in mind.

Custom starting behavior. Hmmm
@staff / @appdev what do you guys think?

[tobiasReichel]

yes that would be a solution or give us the option to override .env file that gets parsed with the docker

[BrutalBirdie]

Something like this for each startup script:

custom_startup_dir="/app/data/app_startup"

if [[ -d $custom_startup_dir]]; then
    echo "==>  Detected custom startup folder, running custom startup scripts"
    for script in ${custom_startup_dir}/*.sh; do
    bash "$script" || exit 1
    done
else
    echo "==> Running default app Startup"
    default_startup()
fi

Note to self, this should also contain a check if the folder contains executable files.

[tobiasReichel]

But there is no easy way to implement it now right? Cause that looks like it belongs in the start.sh

Or am I wrong?

[BrutalBirdie]

@tobiasReichel you are right. Currently it is part of the read-only start.sh

https://git.cloudron.io/cloudron/gitlab-app/-/blob/master/start.sh#L44-L57

[nebulon]

I see, so given that if Gitlab is installed without Cloudron user management enabled, it will always disable ldap, but not overwrite the other ldap related configs?

[tobiasReichel]

@nebulon

yes the options stay as far as I see

so any easy way to enable it as far as you know?

or do I need to deploy my own container with the template out of the gitlab and change the start.sh script?

[girish]

@tobiasReichel Is it an option to use the Jumpcloud LDAP integration using https://docs.cloudron.io/user-management/#external-directory ? This way you don't need to configure GitLab specifically to use Jumpcloud.