GitLab on Google Cloud overview

The GitLab on Google Cloud integration simplifies deploying GitLab source code to Google Cloud runtimes, and is available for the Free, Premium, and Ultimate tier of the GitLab.com offering.

To get started, try the end-to-end GitLab tutorial, Set up the GitLab on Google Cloud integration.

Security configuration

The GitLab on Google Cloud integration uses workload identity federation for authorization and authentication for GitLab workloads on Google Cloud without the need for service accounts or service account keys. For more information on how workload identity federation is used in this partnership, see Authentication overview.

To set up workload identity federation and the necessary Identity and Access Management (IAM) roles for the GitLab on Google Cloud integration, see the GitLab tutorial Google Cloud IAM.

GitLab components

The GitLab on Google Cloud integration uses Google created and maintained GitLab components to simplify Google Cloud actions within GitLab pipelines. To use the components for this integration, you must configure authentication and authorization for GitLab to Google Cloud by following the instructions in the GitLab tutorial Google Cloud Workload Identity Federation and IAM policies.

You can view the all the Google maintained components on GitLab.com.

Artifact Management

The GitLab on Google Cloud integration lets you upload your GitLab artifacts to Artifact Registry for streamlined deployment to Google Cloud runtimes. You can view the artifacts in GitLab or Artifact Registry, and metadata for each artifact can be accessed in Google Cloud.

To upload artifacts to Artifact Registry, see the GitLab tutorial Google Artifact Registry.

Continuous integration and deployment

The GitLab on Google Cloud integration lets you configure GitLab runner settings directly in your GitLab project using Terraform, in order to run your Google Cloud workloads.

To learn more about runners on Google Cloud, see the GitLab tutorial Provision runners on Google Cloud.

If you have already set up authentication and authorization to Google Cloud with Workload Identity Federation, you can use the Cloud Deploy component, or the Deploy to GKE component.