From 4bb7b71c4c12aedafbec087e89b113bd8f0a05fb Mon Sep 17 00:00:00 2001 From: FalcoSuessgott Date: Tue, 19 Sep 2023 21:27:26 +0200 Subject: [PATCH] chore(docs): Fix incorrect base_url in gitlab/config (#13) * add https to base_url * Update README.md --- README.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index a50c484..507d716 100644 --- a/README.md +++ b/README.md @@ -59,7 +59,7 @@ Since Gitlab 16.0 the ability to create non expiring token has been removed. The command bellow will set up the config backend with a max TTL of 48h. ```shell -$ vault write gitlab/config max_ttl=48h base_url=gitlab.example.com token=gitlab-super-secret-token +$ vault write gitlab/config max_ttl=48h base_url=https://gitlab.example.com token=gitlab-super-secret-token ``` ### Roles @@ -67,8 +67,11 @@ $ vault write gitlab/config max_ttl=48h base_url=gitlab.example.com token=gitlab This will create three roles, one of each type. ```shell +# personal access tokens can only be created by Gitlab Administrators (see https://docs.gitlab.com/ee/api/users.html#create-a-personal-access-token) $ vault write gitlab/roles/personal name=personal-token-name path=username scopes="read_api" token_type=personal token_ttl=24h + $ vault write gitlab/roles/project name=project-token-name path=group/project scopes="read_api" access_level=guest token_type=project token_ttl=24h + $ vault write gitlab/roles/group name=group-token-name path=group/subgroup scopes="read_api" access_level=developer token_type=group token_ttl=24h ```