GitLab Connection
Learn how to configure a GitLab Connection for Infisical using OAuth or Access Token methods.
Infisical supports two methods for connecting to GitLab: OAuth and Access Token. Choose the method that best fits your setup and security requirements.
The OAuth method provides secure authentication through GitLab’s OAuth flow.
Self-Hosted Instance Setup
Self-Hosted Instance Setup
Using the GitLab Connection with OAuth on a self-hosted instance of Infisical requires configuring an OAuth application in GitLab and registering your instance with it.
Prerequisites:
- A GitLab account with existing projects
- Self-hosted Infisical instance
Create an OAuth application in GitLab
Navigate to your user Settings > Applications to create a new GitLab application.
Create the application. As part of the form, set the Redirect URI to https://your-domain.com/organization/app-connections/gitlab/oauth/callback.
The domain you defined in the Redirect URI should be equivalent to the SITE_URL configured in your Infisical instance.
If you have a GitLab group, you can create an OAuth application under it in your group Settings > Applications.
Add your GitLab OAuth application credentials to Infisical
Obtain the Application ID and Secret for your GitLab OAuth application.
Back in your Infisical instance, add two new environment variables for the credentials of your GitLab OAuth application:
INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_ID: The Application ID of your GitLab OAuth application.INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_SECRET: The Secret of your GitLab OAuth application.
Once added, restart your Infisical instance and use the GitLab Connection.
Setup GitLab OAuth Connection in Infisical
Navigate to App Connections
Navigate to the App Connections tab on the Organization Settings page.
Add Connection
Select the GitLab Connection option from the connection options modal.
Choose OAuth Method
Select the OAuth method and click Connect to GitLab.
Grant Access
You will be redirected to GitLab to grant Infisical access to your GitLab account. Once granted, you will be redirected back to Infisical’s App Connections page.
Connection Created
Your GitLab Connection is now available for use.
The OAuth method provides secure authentication through GitLab’s OAuth flow.
Self-Hosted Instance Setup
Self-Hosted Instance Setup
Using the GitLab Connection with OAuth on a self-hosted instance of Infisical requires configuring an OAuth application in GitLab and registering your instance with it.
Prerequisites:
- A GitLab account with existing projects
- Self-hosted Infisical instance
Create an OAuth application in GitLab
Navigate to your user Settings > Applications to create a new GitLab application.
Create the application. As part of the form, set the Redirect URI to https://your-domain.com/organization/app-connections/gitlab/oauth/callback.
The domain you defined in the Redirect URI should be equivalent to the SITE_URL configured in your Infisical instance.
If you have a GitLab group, you can create an OAuth application under it in your group Settings > Applications.
Add your GitLab OAuth application credentials to Infisical
Obtain the Application ID and Secret for your GitLab OAuth application.
Back in your Infisical instance, add two new environment variables for the credentials of your GitLab OAuth application:
INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_ID: The Application ID of your GitLab OAuth application.INF_APP_CONNECTION_GITLAB_OAUTH_CLIENT_SECRET: The Secret of your GitLab OAuth application.
Once added, restart your Infisical instance and use the GitLab Connection.
Setup GitLab OAuth Connection in Infisical
Navigate to App Connections
Navigate to the App Connections tab on the Organization Settings page.
Add Connection
Select the GitLab Connection option from the connection options modal.
Choose OAuth Method
Select the OAuth method and click Connect to GitLab.
Grant Access
You will be redirected to GitLab to grant Infisical access to your GitLab account. Once granted, you will be redirected back to Infisical’s App Connections page.
Connection Created
Your GitLab Connection is now available for use.
The Access Token method uses a GitLab access token for authentication, providing a straightforward setup process.
Generate GitLab Access Token
Personal access tokens provide access to your GitLab account and all projects you have access to.
Navigate to Access Tokens
Log in to your GitLab account and navigate to User Settings > Access tokens. Click Add new token to create a new personal access token.
Configure Token
For Secret Syncs, your token will require the ability to access the API: Fill in the token details:
- Token name: A descriptive name for the token (e.g., “connection-token”)
- Expiration date: Set an appropriate expiration date
- Select scopes: Choose the api scope for full API access
For Secret Syncs, your token will require the ability to access the API: Fill in the token details:
- Token name: A descriptive name for the token (e.g., “connection-token”)
- Expiration date: Set an appropriate expiration date
- Select scopes: Choose the api scope for full API access
Personal Access Token connections require manual token rotation when your GitLab access token expires or is regenerated. Monitor your connection status and update the token as needed.
Copy Token
Copy the generated token immediately as it won’t be shown again.
Keep your access token secure and do not share it. Anyone with access to this token can access your GitLab account and projects.
Personal access tokens provide access to your GitLab account and all projects you have access to.
Navigate to Access Tokens
Log in to your GitLab account and navigate to User Settings > Access tokens. Click Add new token to create a new personal access token.
Configure Token
For Secret Syncs, your token will require the ability to access the API: Fill in the token details:
- Token name: A descriptive name for the token (e.g., “connection-token”)
- Expiration date: Set an appropriate expiration date
- Select scopes: Choose the api scope for full API access
For Secret Syncs, your token will require the ability to access the API: Fill in the token details:
- Token name: A descriptive name for the token (e.g., “connection-token”)
- Expiration date: Set an appropriate expiration date
- Select scopes: Choose the api scope for full API access
Personal Access Token connections require manual token rotation when your GitLab access token expires or is regenerated. Monitor your connection status and update the token as needed.
Copy Token
Copy the generated token immediately as it won’t be shown again.
Keep your access token secure and do not share it. Anyone with access to this token can access your GitLab account and projects.
Project access tokens provide access to a specific GitLab project, offering more granular control.
Navigate to Project Settings
Go to your GitLab project and navigate to Settings > Access Tokens. Click Add new token to create a new project access token.
Configure Token
For Secret Syncs, your token will require the ability to access the API and be at least an Owner: Fill in the token details:
- Token name: A descriptive name for the token
- Expiration date: Set an appropriate expiration date
- Select role: Choose Owner or higher role
- Select scopes: Choose the api scope for API access
For Secret Syncs, your token will require the ability to access the API and be at least an Owner: Fill in the token details:
- Token name: A descriptive name for the token
- Expiration date: Set an appropriate expiration date
- Select role: Choose Owner or higher role
- Select scopes: Choose the api scope for API access
Project Access Token connections require manual token rotation when your GitLab access token expires or is regenerated. Monitor your connection status and update the token as needed.
Copy Token
Copy the generated token immediately as it won’t be shown again.
Keep your access token secure and do not share it. Anyone with access to this token can access your GitLab account and projects.
Setup GitLab Access Token Connection in Infisical
Navigate to App Connections
Navigate to the App Connections tab on the Organization Settings page.
Add Connection
Select the GitLab Connection option from the connection options modal.
Configure Access Token
Select the Access Token method, paste your GitLab access token in the provided field, and select the appropriate token type.
Click Connect to establish the connection.
Connection Created
Your GitLab Connection is now available for use.
