Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
G
gitlab-ce
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
Analytics
Analytics
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Commits
Issue Boards
Open sidebar
Boxiang Sun
gitlab-ce
Commits
fffba04a
Commit
fffba04a
authored
Aug 21, 2019
by
Ben Bodenmiller
Committed by
Achilleas Pipinellis
Aug 21, 2019
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Clarify how to setup and use multiple Gitaly servers
parent
96b03792
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
61 additions
and
21 deletions
+61
-21
doc/administration/gitaly/index.md
doc/administration/gitaly/index.md
+61
-21
No files found.
doc/administration/gitaly/index.md
View file @
fffba04a
...
@@ -64,6 +64,7 @@ The following list depicts what the network architecture of Gitaly is:
...
@@ -64,6 +64,7 @@ The following list depicts what the network architecture of Gitaly is:
topology.
topology.
-
A
`(Gitaly address, Gitaly token)`
corresponds to a Gitaly server.
-
A
`(Gitaly address, Gitaly token)`
corresponds to a Gitaly server.
-
A Gitaly server hosts one or more storages.
-
A Gitaly server hosts one or more storages.
-
A GitLab server can use one or more Gitaly servers.
-
Gitaly addresses must be specified in such a way that they resolve
-
Gitaly addresses must be specified in such a way that they resolve
correctly for ALL Gitaly clients.
correctly for ALL Gitaly clients.
-
Gitaly clients are: Unicorn, Sidekiq, gitlab-workhorse,
-
Gitaly clients are: Unicorn, Sidekiq, gitlab-workhorse,
...
@@ -77,14 +78,16 @@ The following list depicts what the network architecture of Gitaly is:
...
@@ -77,14 +78,16 @@ The following list depicts what the network architecture of Gitaly is:
-
Authentication is done through a static token which is shared among the Gitaly
-
Authentication is done through a static token which is shared among the Gitaly
and GitLab Rails nodes.
and GitLab Rails nodes.
Below we describe how to configure a Gitaly server at address
Below we describe how to configure two Gitaly servers one at
`gitaly.internal:8075`
with secret token
`abc123secret`
. We assume
`gitaly1.internal`
and the other at
`gitaly2.internal`
your GitLab installation has two repository storages,
`default`
and
with secret token
`abc123secret`
. We assume
`storage1`
.
your GitLab installation has three repository storages:
`default`
,
`storage1`
and
`storage2`
.
### 1. Installation
### 1. Installation
First install Gitaly using either Omnibus GitLab or install it from source:
First install Gitaly on each Gitaly server using either
Omnibus GitLab or install it from source:
-
For Omnibus GitLab:
[
Download/install
](
https://about.gitlab.com/install/
)
the Omnibus GitLab
-
For Omnibus GitLab:
[
Download/install
](
https://about.gitlab.com/install/
)
the Omnibus GitLab
package you want using
**steps 1 and 2**
from the GitLab downloads page but
package you want using
**steps 1 and 2**
from the GitLab downloads page but
...
@@ -119,7 +122,7 @@ Configure a token on the instance that runs the GitLab Rails application.
...
@@ -119,7 +122,7 @@ Configure a token on the instance that runs the GitLab Rails application.
### 3. Gitaly server configuration
### 3. Gitaly server configuration
Next, on the Gitaly server, you need to configure storage paths, enable
Next, on the Gitaly server
s
, you need to configure storage paths, enable
the network listener and configure the token.
the network listener and configure the token.
NOTE:
**Note:**
if you want to reduce the risk of downtime when you enable
NOTE:
**Note:**
if you want to reduce the risk of downtime when you enable
...
@@ -175,15 +178,29 @@ Check the directory layout on your Gitaly server to be sure.
...
@@ -175,15 +178,29 @@ Check the directory layout on your Gitaly server to be sure.
gitaly
[
'listen_addr'
]
=
"0.0.0.0:8075"
gitaly
[
'listen_addr'
]
=
"0.0.0.0:8075"
gitaly
[
'auth_token'
]
=
'abc123secret'
gitaly
[
'auth_token'
]
=
'abc123secret'
# To use TLS for Gitaly you need to add
gitaly
[
'tls_listen_addr'
]
=
"0.0.0.0:9999"
gitaly
[
'certificate_path'
]
=
"path/to/cert.pem"
gitaly
[
'key_path'
]
=
"path/to/key.pem"
```
1.
Append the following to
`/etc/gitlab/gitlab.rb`
for each respective server:
For
`gitaly1.internal`
:
```
gitaly['storage'] = [
gitaly['storage'] = [
{ 'name' => 'default' },
{ 'name' => 'default' },
{ 'name' => 'storage1' },
{ 'name' => 'storage1' },
]
]
```
For
`gitaly2.internal`
:
# To use TLS for Gitaly you need to add
```
gitaly
[
'
tls_listen_addr'
]
=
"0.0.0.0:9999"
gitaly['
storage'] = [
gitaly
[
'certificate_path'
]
=
"path/to/cert.pem"
{ 'name' => 'storage2' },
gitaly
[
'key_path'
]
=
"path/to/key.pem"
]
```
```
NOTE:
**Note:**
NOTE:
**Note:**
...
@@ -206,13 +223,26 @@ Check the directory layout on your Gitaly server to be sure.
...
@@ -206,13 +223,26 @@ Check the directory layout on your Gitaly server to be sure.
[auth]
[auth]
token
=
'abc123secret'
token
=
'abc123secret'
```
1.
Append the following to
`/home/git/gitaly/config.toml`
for each respective server:
For
`gitaly1.internal`
:
```
toml
[[storage]]
[[storage]]
name
=
'default'
name
=
'default'
[[storage]]
[[storage]]
name
=
'storage1'
name
=
'storage1'
```
```
For
`gitaly2.internal`
:
```
toml
[[storage]]
name
=
'storage2'
```
NOTE:
**Note:**
NOTE:
**Note:**
In some cases, you'll have to set
`path`
for each
`[[storage]]`
in the
In some cases, you'll have to set
`path`
for each
`[[storage]]`
in the
...
@@ -231,9 +261,13 @@ then all Gitaly requests will fail.
...
@@ -231,9 +261,13 @@ then all Gitaly requests will fail.
Additionally, you need to
Additionally, you need to
[
disable Rugged if previously manually enabled
](
../high_availability/nfs.md#improving-nfs-performance-with-gitlab
)
.
[
disable Rugged if previously manually enabled
](
../high_availability/nfs.md#improving-nfs-performance-with-gitlab
)
.
We assume that your Gitaly server can be reached at
We assume that your
`gitaly1.internal`
Gitaly server can be reached at
`gitaly.internal:8075`
from your GitLab server, and that Gitaly can read and
`gitaly1.internal:8075`
from your GitLab server, and that Gitaly server
write to
`/mnt/gitlab/default`
and
`/mnt/gitlab/storage1`
respectively.
can read and write to
`/mnt/gitlab/default`
and
`/mnt/gitlab/storage1`
.
We assume also that your
`gitaly2.internal`
Gitaly server can be reached at
`gitaly2.internal:8075`
from your GitLab server, and that Gitaly server
can read and write to
`/mnt/gitlab/storage2`
.
**For Omnibus GitLab**
**For Omnibus GitLab**
...
@@ -241,8 +275,9 @@ write to `/mnt/gitlab/default` and `/mnt/gitlab/storage1` respectively.
...
@@ -241,8 +275,9 @@ write to `/mnt/gitlab/default` and `/mnt/gitlab/storage1` respectively.
```
ruby
```
ruby
git_data_dirs
({
git_data_dirs
({
'default'
=>
{
'gitaly_address'
=>
'tcp://gitaly.internal:8075'
},
'default'
=>
{
'gitaly_address'
=>
'tcp://gitaly1.internal:8075'
},
'storage1'
=>
{
'gitaly_address'
=>
'tcp://gitaly.internal:8075'
},
'storage1'
=>
{
'gitaly_address'
=>
'tcp://gitaly1.internal:8075'
},
'storage2'
=>
{
'gitaly_address'
=>
'tcp://gitaly2.internal:8075'
},
})
})
gitlab_rails
[
'gitaly_token'
]
=
'abc123secret'
gitlab_rails
[
'gitaly_token'
]
=
'abc123secret'
...
@@ -268,9 +303,11 @@ write to `/mnt/gitlab/default` and `/mnt/gitlab/storage1` respectively.
...
@@ -268,9 +303,11 @@ write to `/mnt/gitlab/default` and `/mnt/gitlab/storage1` respectively.
repositories
:
repositories
:
storages
:
storages
:
default
:
default
:
gitaly_address
:
tcp://gitaly.internal:8075
gitaly_address
:
tcp://gitaly
1
.internal:8075
storage1
:
storage1
:
gitaly_address
:
tcp://gitaly.internal:8075
gitaly_address
:
tcp://gitaly1.internal:8075
storage2
:
gitaly_address
:
tcp://gitaly2.internal:8075
gitaly
:
gitaly
:
token
:
'
abc123secret'
token
:
'
abc123secret'
...
@@ -350,8 +387,9 @@ To configure Gitaly with TLS:
...
@@ -350,8 +387,9 @@ To configure Gitaly with TLS:
```
ruby
```
ruby
git_data_dirs
({
git_data_dirs
({
'default'
=>
{
'gitaly_address'
=>
'tls://gitaly.internal:9999'
},
'default'
=>
{
'gitaly_address'
=>
'tls://gitaly1.internal:9999'
},
'storage1'
=>
{
'gitaly_address'
=>
'tls://gitaly.internal:9999'
},
'storage1'
=>
{
'gitaly_address'
=>
'tls://gitaly1.internal:9999'
},
'storage2'
=>
{
'gitaly_address'
=>
'tls://gitaly2.internal:9999'
},
})
})
gitlab_rails
[
'gitaly_token'
]
=
'abc123secret'
gitlab_rails
[
'gitaly_token'
]
=
'abc123secret'
...
@@ -377,9 +415,11 @@ To configure Gitaly with TLS:
...
@@ -377,9 +415,11 @@ To configure Gitaly with TLS:
repositories
:
repositories
:
storages
:
storages
:
default
:
default
:
gitaly_address
:
tls://gitaly.internal:9999
gitaly_address
:
tls://gitaly
1
.internal:9999
storage1
:
storage1
:
gitaly_address
:
tls://gitaly.internal:9999
gitaly_address
:
tls://gitaly1.internal:9999
storage2
:
gitaly_address
:
tls://gitaly2.internal:9999
gitaly
:
gitaly
:
token
:
'
abc123secret'
token
:
'
abc123secret'
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment