Skip to content

GitLab Code Context

Select theme

GitLab Runbooks
about
- about.gitlab.com Service
agentic-duo-chat
- index
ai-active-context
- ActiveContext
ai-assisted
- AI-Assisted Service
ai-gateway
alerts
amp
- Amp Service
api
- GitLab API Service
apt-mirror
- Internal apt mirror Service
- alerts
argocd
- ArgoCD Service
artifact-registry-gke
- Artifact Registry (Runway) Service
atlantis
audit-evidence-gathering
- Runbook for audit evidence gathering procedures
backup-restore-testing
- Backup & Restore Testing Service
bastions
blackbox
brand-list-validator
- Brand-List Validator (Runway) Service
build-tooling
- Distribution Build Tooling Service
camoproxy
cells
certificates
charts-e2e-testing
- Charts and Operator E2E Testing Service
ci
ci_deleted_objects_processing
- CI Deleted Objects Processing Triage
ci-orchestration
- CI Orchestration Service
- alerts
ci-runners
clickhouse
- ClickHouse Cloud Service
- ClickHouse Cloud Failure Remediation, Backup & Restore Process
cloud_connector
cloud-cost-analysis
- Cloud Cost Analysis (SQLMesh Catalog) Service
cloud-sql
cloudflare
console
- Console Access Service
- Accessing the Rails Console as an SRE
consul
contributors
- contributors.gitlab.com Service
- contributors.gitlab.com
customersdot
data-insights-platform
- Data Insights Platform Service
- environments
  - product-usage-data
    Data Insights Platform - Product Usage Data via Snowplow
  - usage-billing
    Data Insights Platform - Usage Billing
    troubleshooting
    Troubleshooting: Usage Billing - Data Ingestion
- Data Insights Platform - Message queueing with NATS/Jetstream
- Data Insights Platform Runbooks
data-server-rebuild-ansible
- Data-Server Rebuild Ansible Service
- Troubleshooting `data-server-rebuild-ansible` Pipeline Failures
db-benchmarking
- Database Benchmarking Service
dblab
- Database Lab (postgres.ai) Service
decomposition
- CI Mirrored Tables
dedicated-audit
- Dedicated Audit Service
dedicated-backups
- Dedicated Backups Service
dedicated-common
- Dedicated Common Service
dedicated-lb
- Dedicated Load Balancing Service
dedicated-nat
- Dedicated NAT Service
dedicated-networking
- Dedicated Networking Service
dedicated-provisioning
- Dedicated Provisioning Service
dedicated-rds
- Dedicated RDS Service
dedicated-secrets
- Dedicated Secrets Service
design
- design.gitlab.com Service
- design.gitlab.com Runbook
dev-gitlab-org
disaster-recovery
docs-website
- docs.gitlab.com Service
duo
duo-agent-platform
- Duo Agent Platform Service
duo-chat
- Duo Chat Runbook
duo-code-review
- Duo Code Review Runbook
duo-workflow-svc
- Duo Workflow Service
- alerts
dx-triage-ops
- Triage-ops reactive webhook processor (Runway) Service
editor-extensions
- Editor Extensions Runbook
elastic
- Elastic
- Advanced Search cluster metrics in Mimir
- Advanced Search
- alerts
  - ElasticsearchExporterClusterUnreachable
- disaster_recovery
  - Advanced Search Disaster recovery
- Elastic Nodes Disk Space Saturation
- Elastic Cloud
- exercises
- Kibana
- troubleshooting
  - Troubleshooting
  - elk_mapper_parsing_exception
engineering-portal
- Engineering Portal Service
errortracking
- ErrorTracking Service
- ErrorTracking main troubleshooting document
example-service-gke
- Example Runway GKE Service
ext-pvs
- External Pipeline Validation Service
external_license_db
- External License DB Service
- External License DB main troubleshooting documentation
external-dns
- ExternalDNS Service
fleet-management
- Fleet Management Service
- config_management
forum
- forum.gitlab.com Service
- Management for forum.gitlab.com
frontend
gamedays
- Game days
- scenarios
git
gitaly
gitlab-com-artifact-registry
- Artifact Registry Service
- overview
gitlab-com-pkgs
- Package GCS Bucket Service
- overview
gitlab-static
- gitlab-static.net zone hosted on Cloudflare Service
- Web IDE Assets
glab
- glab Runbook
glgo
- Identity layer service for the Google Cloud integration
glql
- GitLab Query Language (GLQL) Service
- GitLab Query Language (GLQL)
google-cloud-storage
- Google Cloud Storage Service
- CI Artifacts CDN
growth
- Growth – Trials Health Runbook
hackystack
- Hackystack Service
hosted-runners
http-router
iam-auth-ext-gke
- IAM Auth HTTP (Runway) Service
iam-auth-gke-grpc
- IAM Auth gRPC (Runway) Service
iam-data-gke-grpc
- IAM Data Access (Runway) Service
importers
incident-automation
- Incident Automation (inc-automate)
incident-io
incidents
- Incidents
- When GitLab.com is down
internal-api
- GitLab Internal API Service
ir.gitlab.com
- Investors Relations (ir.gitlab.com) main troubleshoot documentation
istio
- Istio Service
jaeger
- Jaeger Service
kas
kube
logging
- Logging Service
- exercises
  - ILM exercise
  - logging_exercies_1
- logging_bigquery_schemas
  - Cloudflare Logpush Schema
- Loading StackDriver(SD) Archives from Google Cloud Storage (GCS) into BiqQuery
- Scaling Elastic Cloud Clusters
- troubleshooting
  - Troubleshooting
- Vector
mailgun
mailroom
- Mailroom Incoming Mail Service
mcp-server
- GitLab MCP Server Service
memorystore
- Google Cloud Memorystore Service
memorystore-ops-gitlab-valkey
- Memorystore Valkey for ops.gitlab.net Service
memorystore-redis-concurrency-limit
- Memorystore Redis Concurrency Limit Service
memorystore-redis-sk-quarantine
- Memorystore Redis Sidekiq Quarantine Service
- alerts
  - MemorystoreRedisSkQuarantineServicePrimaryServerTrafficAbsent
memorystore-redis-tracechunks
metrics-catalog
mimir
monitoring
nat
nats
nginx
- NGINX Service
ntp
- Host clock skew / clock not synchronising
observer
- Development metrics collection Service
omnibus
- GitLab Omnibus Package Service
onboarding
ops-gitlab-net
orbit
- Orbit Service
- alerts
org-mover
- Org Mover Service
organizations
- alerts
  - DeletionScheduledBacklogOverdueRecords / DeletionScheduledBacklogOldestAgeTooHigh
package-registry
packaging
packhorse
pages
patroni
patroni-ci
- CI Postgres (Patroni) Service
- Recovering from CI Patroni cluster lagging too much or becoming completely broken
patroni-registry
- Registry Postgres (Patroni) Service
patroni-sec
- Sec Postgres (Patroni) Service
pd-event-logger-7760xa
- Logs PagerDuty incident events to ElasticSearch Service
- events
pgbouncer
pgbouncer-ci
- CI PGBouncer Primary Database Pool Service
pgbouncer-registry
- Registry PGBouncer Primary Database Pool Service
pgbouncer-sec
- Sec PGBouncer Primary Database Pool Service
pingdom
- Pingdom Service
- Pingdom
pipeline-validation-service
- Pipeline Validation Service
plantuml
- PlantUML Service
- PlantUML
pmdb-dist-svc
- PMDB distribution service
postgres-archive
- Postgres DR Archive Service
- Postgres archive replicas
postgres-dr-delayed
- Postgres DR Delayed Replica Service
- Postgres Replicas
psql-timings
- PSQL Timings Service
pubsub
- Pubsub for Logging Service
- PubSub Queuing Rate Increasing
pulp
pvs
- Pvs Service
rate-limiting
- Rate Limiting Service
redis
redis-actioncable
- Redis ActionCable Service
redis-cluster-cache
- Redis Cluster Cache Service
- Removing cache entries from Redis
redis-cluster-chat-cache
- Redis Cluster Chat Cache Service
redis-cluster-database-lb
- Redis Cluster Database Loadbalancing Service
redis-cluster-feature-flag
- Redis Cluster Feature Flag Service
redis-cluster-queues-meta
- Redis Cluster Queues Meta Service
redis-cluster-ratelimiting
- Redis Cluster RateLimiting Service
redis-cluster-registry
- Redis Cluster Registry Service
redis-cluster-repo-cache
- Redis Cluster Repo Cache Service
redis-cluster-sessions
- Redis Cluster Sessions Service
redis-cluster-shared-state
- Redis Cluster SharedState Service
redis-feature-flag
- Redis-feature-flag Service
redis-pubsub
- Redis Pub/Sub Service
redis-ratelimiting
- Redis-ratelimiting Service
redis-registry-cache
- Redis Registry Cache Service
redis-sessions
- Redis Sessions Service
redis-sidekiq
- Redis Sidekiq Service
- alerts
  - component_saturation_slo_out_of_bounds:redis_memory
redis-tracechunks
- Redis TraceChunks Service
registry
release-management
- High build pressure
- High deploy pressure
release-tooling
- Delivery Release Tooling Service
renovate
- Renovate at GitLab: Current Implementation Documentation
repository-mirroring
runway
runway-db-artifact-registry-gke
- Artifact Registry GKE Database (Postgres) Service
runway-db-example
- Example Runway-managed Postgres Service
runway-db-secrets-manager-gke
- Secrets Manager GKE Database (Postgres) Service
runway-redis-artifact-registry-gke
- Artifact Registry GKE Redis (Memorystore) Service
runway-redis-example
- Example Runway-managed Redis Service
sample-collector
- Distributed Tracing Sample Collector Service
sast-service
- SAST Scanner Service for SAST in the IDE
search
- Global Search Service
- alerts
  - GlobalSearchAdvancedApdexBudgetBurnHigh
  - GlobalSearchAdvancedApdexBurstCountHigh
secret-detection
- Detects secret leaks in the given payloads Service
- Secret Detection Partner Token Verification Troubleshooting
secret-revc-worker
- Secret Revocation Worker Service
secret-revocation
- Secret Revocation Service
secrets-manager-gke
- Secrets Manager GKE (OpenBao) Service
security-patching
- alerts
  - UbuntuLivepatch
- linux-os
sentry
- Monitoring Service
- Troubleshooting
service_desk
- Debugging Service Desk
sidekiq
siphon
- Siphon Service
- alerts
  - SiphonEmergencyModeActive
  - SiphonLogicalReplicationSlotLagHigh
spamcheck
- Spamcheck Service
sqlmesh-catalog
- SQLMesh Catalog Service
sscs
- auth
stackdriver
- Stackdriver Metrics Service
staging-ref
- Staging ref
- GET Monitoring Setup
storage
- fs
  - zfs
    zlonk
    Zlonk Service
switchboard
- Switchboard Service
teleport
(Title: Name of alert)
(Title: Service Name)
thanos
- thanos Service
token-rotation-management
- Token rotation management Service
topology-grpc
- Topology Service gRPC
topology-rest
- Topology Service Rest
- Breakglass
topology-service
- Performance Test Topology Service
- Topology Service: On-Call Survival Guide
topology-spanner
- Topology Service Cloud Spanner
tracing
- Distributed Tracing Service
tracing-app-ruby
- Distributed Tracing Sample App - Ruby Service
tutorials
uncategorized
vault
version
- version.gitlab.com Service
- version.gitlab.com Runbook
web
web-ide
- Web IDE runbook
web-pages
- GitLab Pages Service
websockets
- Websockets Service
- Custom Websocket Alerts
wikis
- Wikis
wiz-runtime-sensor
- Wiz Sensor Service
woodhouse
- Woodhouse Service
woodhouse-slack
- Woodhouse Slack bot Service
- Woodhouse-Slack Overview
workhorse
- Workhorse Service
- Workhorse Apdex Degradation
workspaces
- Remote Development Workspaces Service
zoekt
- Exact code search Service
- alerts

GitLab Code Context

Select theme

On this page

Overview
Runbooks

On this page

Overview
Runbooks

SSCS - Authentication & Authorization Runbooks

Ownership:

Authentication Group.
Authorization Group.

Runbooks

Section titled “Runbooks”

The GATE Infra runbooks are maintained in the iam repository under docs/runbooks:

GATE / iam-data-access
Cloud Connector authentication and key rotation
YugabyteDB Aeon

Runbooks maintained in this repository:

E-Mail based OTP
Blocked user login attempts are high
Rate of successful user logins is zero
Project authorization refresh fan-out

Previous
SQLMesh Catalog Service Next
Managing Yugabyte support access