Add support for Gitlab.com (SaaS)

[fjudith]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Many potential adopters are not confortable to maintain their own Gitlab CI instance. However it seems acceptable to use the Gitlab. Software-as-a-Service platform including both repository, container registry, and CI runners which are managed and scallable.

What is the outcome that you are trying to reach?

Reduce the Harmonix platform footprint by leveraging Gitlab SaaS repository and CI runners to ease platform-engineering and developer collaboration.

Describe the solution you would like

Describe alternatives you have considered

None

Additional context

Tasks

Preview Give feedback

1. Implement an option to select either Gitlab Community (on-premise) or Gitlab.com (SaaS) in the installation process.
2. Create new iac/roots/opa-platform containing only the required resources for Gitlab.com deployment
3. Platform/Environment role and associated /${dotenv.prefix}/platform-role parameter store for Harmonix backend plugin and Gitlab SaaS runner
4. Pipeline role and associated /${dotenv.prefix}/platform-role parameter store for Gitlab SaaS runners
5. IAM OpenId Provider for Gitlab SaaS runner doc allow to assume the Platform/Environment Role.
6. Secret opa-admin-gitlab-secrets to store the Group Access Key that enables SaaS runners to push in generated git repositories
7. Optional: Container image(s) to reduce the time spent on IaC tooling installation _(Should ideally be built using a scaffolded repo and stored in Gitlab Container Registry).

[fjudith]

We already implementd this feature in separated private repository and are open to submit a PR

[z-sourcecode]

@fjudith Thank you for considering to contribute back to Harmonix on AWS project. please submit the PR We"ll schedule a review as soon as we can. Your contribution is greatly appreciated!