Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
G
gitlab_runner_auth
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Package registry
Container registry
Model registry
Operate
Environments
Terraform modules
Monitor
Incidents
Service Desk
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
GitLab community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
mbd
gitlab_runner_auth
Commits
1136b1ad
"TLM_tool/test_interface.ipynb" did not exist on "146e73bed13515c07800d80fc459041daa323283"
Commit
1136b1ad
authored
3 months ago
by
Aziza Saadi
Browse files
Options
Downloads
Patches
Plain Diff
Add Docker Authentication Testing and Results documentation
parent
c3582f45
No related branches found
No related tags found
No related merge requests found
Changes
1
Show whitespace changes
Inline
Side-by-side
Showing
1 changed file
README.md
+63
-21
63 additions, 21 deletions
README.md
with
63 additions
and
21 deletions
README.md
+
63
−
21
View file @
1136b1ad
...
...
@@ -22,12 +22,38 @@ The following setup was implemented on the kistembd VM for GitLab runners:
*
A runner was configured with a group token for mbd_outreach.
*
Pipelines were triggered for presentation-platform and presentation-platform-1.
*
Pipelines were triggered for
mbd_outreach/
presentation-platform and
mbd_outreach/
presentation-platform-1.
**Result:**
✅ Passed. Both repositories successfully pushed and pulled images using the same runner and token.
**Result:**
✅ Passed.
*
Push and pull operations work seamlessly.
*
New images can be pushed to other repositories in the same group.
*
Each repository can use images from others within the same group.
**Test Case 2: Cross-Group Authentication**
**Objective:**
Verify that authentication works independently across different GitLab groups without conflicts.
**Setup:**
*
A runner was configured for mbd_outreach/presentation-platform.
*
Another runner was configured for gitlab-credential-test/presentation.
*
Pipelines were triggered for both repositories.
**Result:**
✅ Passed
*
Tested with mbd_outreach/presentation-platform and gitlab-credential-test/presentation.
*
Push and pull operations work without affecting each other.
*
No authentication conflicts occurred between the groups.
**Test Case 3: Unauthorized Cross-Group Authentication**
**Objective:**
Test authentication failure when using a token from Group 1 in a runner for Group 2.
**Setup:**
...
...
@@ -42,48 +68,64 @@ The following setup was implemented on the kistembd VM for GitLab runners:
**Result:**
❌ Failed. Authentication failed as expected since a token from mbd_outreach cannot authenticate in gitlab_credential_test.
**Test Case
3
: Subgroup Authentication Hierarchy**
**Test Case
4
: Subgroup Authentication Hierarchy**
**Objective:**
V
alidate the inheritance and limitations of authentication tokens across subgroups
.
**Objective:**
V
erify how authentication tokens are inherited and used across subgroups within a GitLab group
.
**Setup:**
*
Group
1
: mbd_outreach
*
Parent
Group: mbd_outreach
*
Subgroup 1: outreach_1 (
R
unner configured with token_outreach_1)
*
Subgroup 1: outreach_1 (
Has a dedicated r
unner configured with token_outreach_1)
*
Subgroup 2: outreach_2 (
Runner only
inherit
s
the group runner if active)
*
Subgroup 2: outreach_2 (
Does not have its own runner but can
inherit the group
's
runner if active)
**Results:**
✅ outreach_1 pipelines always succeed
ed
.
✅ outreach_1 pipelines always succeed
because it has a dedicated runner with a valid token
.
✅ outreach_2 pipelines succeed
ed
only
when the group runner for mbd_outreach was activ
e.
✅ outreach_2 pipelines succeed only
if the mbd_outreach group runner is active since it relies on inheritanc
e.
❌
If no active runner was present in mbd_outreach, outreach_2 pipeli
ne f
ailed
.
❌
outreach_2 pipelines fail if the mbd_outreach group runner is inactive, as there is no available run
ne
r
f
or authentication
.
**Test Case
4
: Shared Runner Authentication**
**Test Case
5
: Shared Runner Authentication**
**Objective:**
Verify
if two subgroups using the same runner and token can execute pipelines successfully
.
**Objective:**
Verify
that multiple subgroups can successfully execute pipelines using a shared runner inherited from the parent group
.
**Setup:**
Both outreach_1 and outreach_2 inherited Runner 1, which was registered with token_outreach_1.
*
Parent Group: mbd_outreach (Has an active runner)
*
Subgroup 1: outreach_1 (Inherits the runner from mbd_outreach)
*
Subgroup 2: outreach_2 (Inherits the runner from mbd_outreach)
**Result:**
✅ Passed. Both subgroups successfully executed pipelines using the shared runner and token.
**Result:**
✅ Passed.
Both outreach_1 and outreach_2 successfully executed pipelines using the shared runner from mbd_outreach.
**Test Case
5
: Multi-GitLab Instance Authentication**
**Test Case
6
: Multi-GitLab Instance Authentication**
**Objective:**
Ensure
runners on the same VM can authenticate
to
separate GitLab instances
simultaneously
.
**Objective:**
Verify that
runners on the same VM can authenticate
and execute pipelines for
separate GitLab instances
without conflicts
.
**Setup:**
*
Two GitLab instances: git and git-ce
**GitLab Instance 1 (git)**
*
Group: gitlab-credential-test
*
Runner: Runner1 (Configured with Group 1 credentials)
*
Repository: presentation
**GitLab Instance 2 (git-ce)**
*
Group: gitlab-credential-ce
*
Group 1 (git): gitlab-credential-test, Runner1
with Group
1
credentials
*
Runner: Runner2 (Configured
with Group
2
credentials
)
*
Group 2 (git-ce): gitlab-c
re
d
ent
ial-ce, Runner2 with Group2 credentials
*
Repository: p
re
s
ent
ation-ce
*
Pipelines triggered simultaneously in presentation (
Repo1
) and presentation-ce (
Repo2)
-
Pipelines
were
triggered simultaneously in presentation (
Instance git
) and presentation-ce (
Instance git-ce).
**Result**
:✅Passed. Both pipelines executed successfully without authentication conflicts.
\ No newline at end of file
**Result**
:✅Passed.
Both pipelines executed successfully without authentication conflicts.
\ No newline at end of file
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment