Commit ed6925f4 authored by Drew Blessing's avatar Drew Blessing

Merge branch 'docfix-ha-registry-secrets' into 'master'

Update guidance on handling shared secrets in HA setup

See merge request !1152
parents 3a8437af bc1bb4b8
...@@ -95,16 +95,9 @@ Secondary GitLab servers (servers configured **after** the first GitLab server) ...@@ -95,16 +95,9 @@ Secondary GitLab servers (servers configured **after** the first GitLab server)
need some additional configuration. need some additional configuration.
1. Configure shared secrets. These values can be obtained from the primary 1. Configure shared secrets. These values can be obtained from the primary
GitLab server in `/etc/gitlab/gitlab-secrets.json`. Add these to GitLab server in `/etc/gitlab/gitlab-secrets.json`. Copy this file to the
`/etc/gitlab/gitlab.rb` **prior to** running the first `reconfigure` in secondary servers **prior to** running the first `reconfigure` in the steps
the steps above. above.
```ruby
gitlab_shell['secret_token'] = 'fbfb19c355066a9afb030992231c4a363357f77345edd0f2e772359e5be59b02538e1fa6cae8f93f7d23355341cea2b93600dab6d6c3edcdced558fc6d739860'
gitlab_rails['otp_key_base'] = 'b719fe119132c7810908bba18315259ed12888d4f5ee5430c42a776d840a396799b0a5ef0a801348c8a357f07aa72bbd58e25a84b8f247a25c72f539c7a6c5fa'
gitlab_rails['secret_key_base'] = '6e657410d57c71b4fc3ed0d694e7842b1895a8b401d812c17fe61caf95b48a6d703cb53c112bc01ebd197a85da81b18e29682040e99b4f26594772a4a2c98c6d'
gitlab_rails['db_key_base'] = 'bf2e47b68d6cafaef1d767e628b619365becf27571e10f196f98dc85e7771042b9203199d39aff91fcb6837c8ed83f2a912b278da50999bb11a2fbc0fba52964'
```
1. Run `touch /etc/gitlab/skip-auto-migrations` to prevent database migrations 1. Run `touch /etc/gitlab/skip-auto-migrations` to prevent database migrations
from running on upgrade. Only the primary GitLab application server should from running on upgrade. Only the primary GitLab application server should
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment