GitLab Dedicated, from support perspective, works as a combination of SaaS and SM. Customers have full Admin access to the instance, but no access to the infrastructure, nor to the backend configurations. This workflow captures the differences, and details of providing support for GitLab Dedicated.
Support can access tenant logs through OpenSearch.
To access the logs for a specific tenant find the credentials stored in the
GitLab Dedicated - Support Vault, and access the corresponding URL listed there.
Once in the tenant's OpenSearch site:
host:The GitLab host of the log. It can be
<tenant name>-consul-2, etc.
referrer:holds the project path.
message:is the message that would be seen in the logs of a self-managed instance.
xxx.xxx.xxx.xxx - - [08/Jul/2020:13:24:43 +0000] "GET /assets/webpack/commons-pages.projects.show-pages.projects.tree.show.21909065.chunk.js HTTP/1.1" 200 9316 "https://tenant.gitlab-dedicated.com/example-group/test123" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36" 1343 0.001 [default-gitlab-webservice-default-8181]  xxx.xxx.xxx.xxx:8181 9309 0.000 200 fe130eac78314cwf352g3762397572cb
kubernetes.labels.app:used to filter Kubernetes pods.
Gitaly related fields:
grpc.request.glProjectPath:The actual GitLab path project path.
grpc.request.repoPath:Project hash id path.
SAML related fields:
When any changes to the tenant instance are required, please contact the GitLab Dedicated infrastructure team on Slack, using channel
In cases where Customer Support needs to interact with GitLab Dedicated engineers to gather information or similarly debug a problem at tenant's request (when Grafana or OpenSearch does not suffice), raise an issue in the [GitLab Dedicated issue tracker] using a Support Request template.
Emergencies from GitLab Dedicated will come through the Customer Emergencies On-call Rotation as with other emergency types.
The GitLab Dedicated Infrastructure team has a 24/7 PagerDuty rotation: GitLab Dedicated Platform Escalation. To manually create a PD Incident use the Dedicated Platform Service or use the Slack command
/pd trigger and choose "Dedicated Platform Service" as the Impacted Service to escalate an emergency to an SRE after initial triage and analysis.
Customers can add a custom identifier, such as the ticket ID, to the
user-agent field when testing. This makes it easier to filter logs related to the test.
curl -k -vvv -A"GitLabSupport012345" "https://tenant.gitlab-dedicated.com/users/sign_in"