diff --git a/doc/administration/dedicated/img/high_level_architecture_diagram_v17_0.png b/doc/administration/dedicated/img/high_level_architecture_diagram_v17_0.png new file mode 100644 index 0000000000000000000000000000000000000000..91e20dafbbb004fdcb41c2d69d646dbd52a217ce Binary files /dev/null and b/doc/administration/dedicated/img/high_level_architecture_diagram_v17_0.png differ diff --git a/doc/administration/dedicated/img/privatelink_diagram_v17_1.png b/doc/administration/dedicated/img/privatelink_diagram_v17_1.png new file mode 100644 index 0000000000000000000000000000000000000000..105588517890f6410dcebdebda12894261ff44b3 Binary files /dev/null and b/doc/administration/dedicated/img/privatelink_diagram_v17_1.png differ diff --git a/doc/administration/dedicated/img/tenant_network_diagram_v17_0.png b/doc/administration/dedicated/img/tenant_network_diagram_v17_0.png new file mode 100644 index 0000000000000000000000000000000000000000..733e9931e213dc5f8592e516c3fcae284c957769 Binary files /dev/null and b/doc/administration/dedicated/img/tenant_network_diagram_v17_0.png differ diff --git a/doc/administration/dedicated/index.md b/doc/administration/dedicated/index.md index cf4f156517653b93a844973eb4475702b4f080c0..1bfa2c2ceba3f5e49f73672314ff32866f75072e 100644 --- a/doc/administration/dedicated/index.md +++ b/doc/administration/dedicated/index.md @@ -11,11 +11,60 @@ DETAILS: **Tier:** Ultimate **Offering:** GitLab Dedicated -GitLab Dedicated is a single-tenant SaaS solution, fully managed and hosted by GitLab. For more information about this offering, see the [subscription page](../../subscriptions/gitlab_dedicated/index.md). +GitLab Dedicated is a single-tenant SaaS solution, fully managed and hosted by GitLab. +GitLab Dedicated operators and tenant administrators use the Switchboard UI to configure and maintain their tenant environments. + +For more information about this offering, see the [subscription page](../../subscriptions/gitlab_dedicated/index.md). + +## Architecture + +This diagram shows a high-level overview of the architecture for GitLab Dedicated. + + + +When managing GitLab Dedicated tenant instances: + +- Switchboard is responsible for managing global configuration shared between the AWS cloud providers, accessible by tenants. +- Amp is responsible for the interaction with the customer tenant accounts, such as configuring expected roles and policies, enabling the required services, and provisioning environments. + +GitLab team members with edit access can update the [source](https://lucid.app/lucidchart/e0b6661c-6c10-43d9-8afa-1fe0677e060c/edit?page=0_0#) files for the diagram in Lucidchart. + +### Tenant network + +The customer tenant account is a single AWS cloud provider account. The single account provides full tenancy isolation, in its own VPC, and with its own resource quotas. + +The cloud provider account is where a highly resilient GitLab installation resides, in its own isolated VPC. On provisioning, the customer tenant gets access to a High Availability (HA) GitLab primary site and a GitLab Geo secondary site. + + + +GitLab team members with edit access can update the [source](https://lucid.app/lucidchart/e69207d3-7428-4ed1-b8a7-902c608cf8a2/edit?invitationId=inv_5922f7f4-4a0b-4024-b152-a00a9d0daa22&page=0_0#) files for the diagram in Lucidchart. + +#### Gitaly Setup + +GitLab Dedicated deploys Gitaly [in a sharded setup](../../administration/gitaly/index.md#before-deploying-gitaly-cluster), not a Gitaly Cluster. In this setup: + +- Customer repositories are spread across multiple virtual machines. +- GitLab manages [storage weights](../../administration/repository_storage_paths.md#configure-where-new-repositories-are-stored) on behalf of the customer. + +#### Geo Setup + +GitLab Dedicated leverages GitLab Geo for [disaster recovery](../../subscriptions/gitlab_dedicated/index.md#disaster-recovery). + +Geo does not use an active-active failover configuration. For more information, see [Geo](../../administration/geo/index.md). + +#### AWS PrivateLink connection (optional) + +Optionally, private connectivity is available for your GitLab Dedicated instance, using [AWS PrivateLink](https://aws.amazon.com/privatelink/) as a connection gateway. + +Both [inbound](../../administration/dedicated/configure_instance.md#inbound-private-link) and [outbound](../../administration/dedicated/configure_instance.md#outbound-private-link) private links are supported. + + + +GitLab team members with edit access can update the [source](https://lucid.app/lucidchart/cff1ce90-f146-457f-9630-d9b2eecdee99/edit?viewport_loc=553%2C-1872%2C2903%2C1277%2C0_0&invitationId=inv_1bf96b4a-8cc0-4a34-844d-a8780f32862a) files for the diagram in Lucidchart. ## Get started -To get started with GitLab Dedicated: +To get started with GitLab Dedicated, use Switchboard to: -1. [Create your GitLab Dedicated instance](../../administration/dedicated/create_instance.md) using Switchboard. -1. [Configure your GitLab Dedicated instance](../../administration/dedicated/configure_instance.md) using Switchboard. +1. [Create your GitLab Dedicated instance](../../administration/dedicated/create_instance.md). +1. [Configure your GitLab Dedicated instance](../../administration/dedicated/configure_instance.md).