2023-03-05 14:24:40 +05:30

5.1 KiB

Raw Blame History

stage	group	info
Systems	Distribution	To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/product/ux/technical-writing/#assignments

GitLab Dedicated

NOTE: GitLab Dedicated is currently in limited availability. You can learn more and join the waitlist on our website.

GitLab Dedicated is a fully isolated, single-tenant SaaS service that is:

Hosted and managed by GitLab, Inc.
Deployed on AWS in a cloud region of your choice (see the regions that are not supported).

GitLab Dedicated removes the overhead of platform management to increase your operational efficiency, reduce risk, and enhance the speed and agility of your organization. Each GitLab Dedicated instance is highly available with disaster recovery and deployed into the cloud region of your choice. GitLab teams fully manage the maintenance and operations of each isolated instance, so customers can access our latest product improvements while meeting the most complex compliance standards.

It's the offering of choice for enterprises and organizations in highly regulated industries that have complex regulatory, compliance, and data residency requirements.

Available features

Authentication: Support for instance-level SAML OmniAuth functionality. GitLab Dedicated acts as the service provider, and you must provide the necessary configuration in order for GitLab to communicate with your IdP. This is provided during onboarding.
- SAML request signing, group sync, and SAML groups are supported.
Networking:
- Public connectivity with support for IP Allowlists. During onboarding, you can optionally specify a list of IP addresses that can access your GitLab Dedicated instance. Subsequently, when an IP not on the allowlist tries to access your instance the connection is refused.
- Optional. Private connectivity via AWS PrivateLink. You can specify an AWS IAM Principal and preferred Availability Zones during onboarding to enable this functionality. Both Ingress and Egress PrivateLinks are supported. When connecting to an internal service running in your VPC over HTTPS via PrivateLink, GitLab Dedicated supports the ability to use a private SSL certificate, which can be provided during onboarding.
Upgrades:
- Monthly upgrades tracking one release behind the latest (n-1), with the latest security release.
- Out of band security patches provided for high severity releases.
Backups: Regular backups taken and tested.
Choice of cloud region: Upon onboarding, choose the cloud region where you want to deploy your instance. Some AWS regions have limited features and as a result, we are not able to deploy production instances to those regions. See below for the full list of regions not currently supported.
Security: Data encrypted at rest and in transit using latest encryption standards.
Application: Self-managed Ultimate feature set with the exception of the unsupported features listed below.

Features that are not available

GitLab application features

The following GitLab application features are not available:

LDAP, Smartcard, or Kerberos authentication
Multiple login providers
Advanced Search
GitLab Pages
FortiAuthenticator, or FortiToken 2FA
Reply-by email
Service Desk
GitLab-managed runners
Any feature not listed above which must be configured outside of the GitLab user interface.

The following features will not be supported:

Mattermost
Server-side Git hooks