This document is a work-in-progress and represents a very early state of the Cells design. Significant aspects are not documented, though we expect to add them in the future. This is one possible architecture for Cells, and we intend to contrast this with alternatives before deciding which approach to implement. This documentation will be kept even if we decide not to implement this so that we can document the reasons for not choosing this approach.
Cells: Secrets
Where possible, each Cell should have its own distinct set of secrets. However, there will be some secrets that will be required to be the same for all Cells in the cluster.
1. Definition
GitLab has a lot of secrets that need to be configured.
Some secrets are for inter-component communication, for example, GitLab Shell secret, and used only within a Cell.
Some secrets are used for features, for example, ci_jwt_signing_key.
2. Data flow
3. Proposal
- Secrets used for features will need to be consistent across all Cells, so that the UX is consistent.
- This is especially true for the
db_key_basesecret which is used for encrypting data at rest in the database - so that Projects that are transferred to another Cell will continue to work. We do not want to have to re-encrypt such rows when we move Projects/Groups between Cells.
- This is especially true for the
- Secrets which are used for intra-Cell communication only should be uniquely generated per Cell.