GitLab
Connect
Connect GitLab from the terminal. Pass --help for the flags GitLab accepts.
praxen integration connect --type gitlabSign in to GitLab.com as a group Owner, or enter a self-managed instance URL and token.
Connect a GitLab group so Praxen Inc. reads its code, links each project to the resources it deploys, and raises an issue when a pipeline fails on the default branch. One connection covers one group and all of its subgroups.
GitLab.com
- Click Connect GitLab, then Continue with GitLab.com.
- Sign in as an Owner of a top-level group and approve the Praxen Inc. application.
- Choose the group. Groups on the Free plan are not available, because group webhooks need GitLab Premium or Ultimate. Trials of either plan work.
- Praxen Inc. adds a service account to the group with the Maintainer role, gives it a token, and adds a group webhook. It then revokes the sign-in grant.
Praxen Inc. acts as the service account from then on, so its activity in GitLab shows under that account, not under your name.
Self-managed GitLab
- In the group, open Settings > Access tokens and create a group access token with the Owner role and the
apiscope. A service account token with the same access also works. - In Praxen Inc., click Connect GitLab and enter the instance URL and the token.
- Click Find groups, choose the group, and click Connect group.
The instance must be reachable from the public internet with a valid TLS certificate.
What Praxen Inc. keeps up to date
- New, renamed, moved and removed projects follow within seconds through the group webhook, and a daily resync corrects anything a delivery missed.
- A push to a project's default branch refreshes that project and its links to deployed resources.
- Praxen Inc. renews the service account token it creates before it expires. A token you paste stays yours: renew it in GitLab before it expires, then connect again with the new token.
Permissions
| Access | Why |
|---|---|
api | Read projects, files and pipelines, and manage the group webhook |
read_repository, write_repository | Read the code at the default branch |
self_rotate | Renew the service account token before it expires (GitLab.com sign-in only) |
When you disconnect, Praxen Inc. revokes its service account token. The service account and the group webhook stay in the group until a group Owner removes them.
Disconnect
Disconnecting stops every sync and check and deletes the credentials Praxen Inc. held. Praxen Inc. removes what GitLab's API lets it remove. The following stays until you remove it yourself:
- Praxen Inc. service account in the group (its token is revoked)
- Praxen Inc. group webhook
praxen integration disconnect <id>Tools
1Operations agents can perform in threads.