3.8 KiB
stage | group | info |
---|---|---|
Configure | Configure | To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments |
Migrate to the GitLab agent for Kubernetes (FREE)
To connect your Kubernetes cluster with GitLab, you can use:
The certificate-based integration is deprecated in GitLab 14.5. It is expected to be turned off by default in 15.0 and removed in GitLab 15.6.
If you are using the certificate-based integration, you should move to another workflow as soon as possible.
As a general rule, to migrate clusters that rely on GitLab CI/CD, you can use the CI/CD workflow. This workflow uses an agent to connect to your cluster. The agent:
- Is not exposed to the internet.
- Does not require full cluster-admin access to GitLab.
NOTE: The certificate-based integration was used for popular GitLab features like GitLab Managed Apps, GitLab-managed clusters, and Auto DevOps. Some features are currently available only when using certificate-based integration.
Migrate cluster application deployments
Migrate from GitLab-managed clusters
With GitLab-managed clusters, GitLab creates separate service accounts and namespaces for every branch and deploys by using these resources.
The GitLab agent uses impersonation strategies to deploy to your cluster with restricted account access. To do so:
- Choose the impersonation strategy that suits your needs.
- Use Kubernetes RBAC rules to manage impersonated account permissions in Kubernetes.
- Use the
access_as
attribute in your agent configuration file to define the impersonation.
Migrate from Auto DevOps
To configure your Auto DevOps project to use the GitLab agent:
- Follow the steps to install an agent in your cluster.
- Go to the project where you use Auto DevOps.
- On the left sidebar, select Settings > CI/CD and expand Variables.
- Select Add new variable.
- Add
KUBE_CONTEXT
as the key,path/to/agent/project:agent-name
as the value, and select the environment scope of your choice. - Select Add variable.
- Repeat the process to add another variable,
KUBE_NAMESPACE
, setting the value for the Kubernetes namespace you want your deployments to target, and set the same environment scope from the previous step. - On the left sidebar, select Infrastructure > Kubernetes clusters.
- From the certificate-based clusters section, open the cluster that serves the same environment scope.
- Select the Details tab and disable the cluster.
- To activate the changes, on the left sidebar, select CI/CD > Variables > Run pipeline.
For an example, view this project.
Migrate generic deployments
Follow the process for the CI/CD workflow.
Migrate from GitLab Managed applications
Follow the process to migrate from GitLab Managed Apps to the cluster management project.
Migrate a cluster management project
See how to use a cluster management project with the GitLab agent.
Migrate cluster monitoring features
Cluster monitoring features are not yet supported by the GitLab agent for Kubernetes.