CorpSec Systems and Tech Stack
Cross-Department System Owners
As GitLab has grown organically, several departments and functional groups have their own System Administrators (“System Owners”) that handle day-to-day management of the tech stack applications that are specific to that department or functional group, within the framework of organization-wide compliance, infrastructure, and security best practices. Each tech stack application at GitLab has a System Owner that is the DRI for handling the implementation and day-to-day operational support for the team members that utilize that application (in their department or functional group). This has an added benefit of preventing the traditional IT department from being a bottleneck and allows each department to self-service as part of GitLab’s efficiency for the right group subvalue.
- Customer Success Operations
- (Business Intelligence) Data Team
- Engineering Infrastructure (Reliability SREs)
- Engineering Productivity
- Enterprise Applications
- Marketing Operations
- People Operations
- People Group Engineering
- Sales Systems
CorpSec Systems Directory
The Corporate Security department provides configuration management engineering and tech support helpdesk services for team members and temporary service providers (aka contractors, vendors, etc.) for the company-wide systems that we manage.
| System (Handbook Page) | User Guides and Issues | System Owners |
|---|---|---|
| 1Password |
Create Vault Add User to Vault Remove User from Vault Engineering Issue Groups Passkey Guide Setup Guide Vaults |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-1password@gitlab-com/corpsys/1password @corpsysadmins-1passwordPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER PASS ADMIN PASS ADMIN APP ROLE |
Access Control (accessctl)access.gitlab.systemsAvailable in FY25-Q3 |
Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-accessctl@gitlab-com/corpsys/accessctl @corpsysadmins-accessctlUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
|
Amazon Web Services (billing) Cost Explorer and invoices across all orgs |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-aws-billing@gitlab-com/corpsys/aws-billing @corpsysadmins-aws-billing#security_helpUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Amazon Web Services (services)x6953 Organization
|
Create Account for Service/Workload User and Role Management Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-aws-services@gitlab-com/corpsys/aws-services @corpsysadmins-aws-services#security_helpUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Amazon Web Services (sandbox)x3027 Organization |
Create My AWS Account Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-aws-sandbox@gitlab-com/corpsys/aws-sandbox @corpsysadmins-aws-sandbox#sandbox-cloud-questionsUSER 1PASS USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Amazon Web Services (systems)x6658 OrganizationSecure Accounts for CorpSec, InfraSec, SIRT |
Sysadmin Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-aws-systems@gitlab-com/corpsys/aws-systems @corpsysadmins-aws-systems#security_helpADMIN SSO ADMIN APP ROLE |
Amazon Web Services (dedicated-dev)x3675 Organization |
Create My AWS Account Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-aws-dedicated-dev@gitlab-com/gl-security/corp/aws-dedicated-dev @corpsysadmins-aws-dedicated-dev#g_dedicated-teamUSER 1PASS USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Amazon Web Services (dedicated-prd)x0475 Organization |
Sysadmin Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-aws-dedicated-prd@gitlab-com/corpsys/aws-dedicated-prd @corpsysadmins-aws-dedicated-prd#g_dedicated-teamADMIN SSO ADMIN APP ROLE |
Amazon Web Services (dedicated-pubsec)x9885 Organization |
Sysadmin Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-aws-dedicated-pubsec@gitlab-com/corpsys/aws-dedicated-pubsec @corpsysadmins-aws-dedicated-pubsec#g_dedicated-us-pubsecPUBSEC ADMIN SSO |
| Azure (Sandbox) |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-azure@gitlab-com/corpsys/azure @corpsysadmins-azurePlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER 1PASS ADMIN 1PASS ADMIN APP ROLE |
|
Domain Names Managed by Infrastructure Security |
Purchase Request Engineering Issue |
Issues
Infrastructure Security infrastructure-security/dns-records @infrasec-team#security-infrasecADMIN SSO ADMIN APP ROLE |
|
DNS Records Managed by Infrastructure Security |
Update Request Engineering Issue |
Issues
Infrastructure Security infrastructure-security/dns-records @infrasec-team#security-infrasecUSER MR ADMIN MR ADMIN SSO |
| DriveStrike | Engineering Issue |
Issues
/ Epics
Administration Runbooks corpsys-drivestrike@gitlab-com/corpsys/drivestrike @corpsysadmins-drivestrikePlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.ADMIN SSO |
GitLab (com)gitlab.com |
Create Group Update Group Deprecate Group Create Project Update Project Deprecate Project Add User to Group/Project Remove User from Group/Project Service Account Request License for My Work Account License for My Personal Account License for Demo/Internal Group Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gitlab-com@gitlab-com/corpsys/gitlab-com @corpsysadmins-gitlab-comPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.#s_production_engineeringUSER 1PASS/SSO ADMIN 1PASS/SSO ADMIN APP ROLE |
GitLab (ops)ops.gitlab.net |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gitlab-ops@gitlab-com/corpsys/gitlab-ops @corpsysadmins-gitlab-ops#infrastructure_lounge#s_production_engineeringUSER 1PASS/SSO ADMIN 1PASS/SSO ADMIN APP ROLE |
GitLab (dev)dev.gitlab.org |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gitlab-dev@gitlab-com/corpsys/gitlab-dev @corpsysadmins-gitlab-devPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.#s_production_engineeringUSER 1PASS/SSO ADMIN 1PASS/SSO ADMIN APP ROLE |
GitLab (stg)staging.gitlab.com |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gitlab-stg@gitlab-com/corpsys/gitlab-stg @corpsysadmins-gitlab-stgPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.#s_production_engineeringUSER 1PASS/SSO ADMIN 1PASS/SSO ADMIN APP ROLE |
GitLab (cfg)cfg.gitlab.systems |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gitlab-cfg@gitlab-com/corpsys/gitlab-cfg @corpsysadmins-gitlab-cfgPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.#security_helpUSER SSO ADMIN SSO ADMIN APP ROLE |
| Google Cloud Platform (Billing) |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gcp-billing@gitlab-com/corpsys/gcp-billing @corpsysadmins-gcp-billing#cloud-finops#security_helpUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Google Cloud Platform (com)gitlab.com |
Create Project for Service/Workload User and Role Management Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gcp-com@gitlab-com/corpsys/gcp-com @corpsysadmins-gcp-com#infrastructure_lounge#s_production_engineering#security_helpUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Google Cloud Platform (sandbox)gitlabsandbox.cloud |
Create My GCP Project Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gcp-sandbox@gitlab-com/corpsys/gcp-sandbox @corpsysadmins-gcp-sandbox#sandbox-cloud-questionsUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Google Cloud Platform (systems)gitlab.systems |
Sysadmin Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gcp-systems@gitlab-com/corpsys/gcp-systems @corpsysadmins-gcp-systems#security_helpADMIN SSO ADMIN APP ROLE |
Google Cloud Platform (cells-dev)gitlab-cells.dev |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gcp-cells-dev@gitlab-com/corpsys/gcp-cells-dev @corpsysadmins-gcp-cells-dev#s_production_engineeringUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Google Cloud Platform (cells-prd)gitlab-cells.com |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gcp-cells-prd@gitlab-com/corpsys/gcp-cells-prd @corpsysadmins-gcp-cells-prd#s_production_engineeringUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Google Cloud Platform (dedicated-dev)gitlab-private.org |
Create My GCP Project Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gcp-dedicated-dev@gitlab-com/corpsys/gcp-dedicated-dev @corpsysadmins-gcp-dedicated-dev#g_dedicated-teamUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
Google Cloud Platform (dedicated-prd)gitlab-dedicated.com |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-gcp-dedicated-prd@gitlab-com/corpsys/gcp-dedicated-prd @corpsysadmins-gcp-dedicated-prd#g_dedicated-teamUSER SSO USER APP ROLE ADMIN SSO ADMIN APP ROLE |
| Google Apps (Workspace) |
Authorize/Create App Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-google-app@gitlab-com/corpsys/google-app @corpsysadmins-google-appPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.ADMIN SSO ADMIN SSO ROLE |
| Google Calendar |
Engineering Issue Delegation Guide |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-google-cal@gitlab-com/corpsys/google-cal @corpsysadmins-google-calPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER SSO ADMIN SSO ADMIN APP ROLE |
| Google Drive (Docs, Sheets, Slides) |
Create or Update Drive Add or Remove Users Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-google-drive@gitlab-com/corpsys/google-drive @corpsysadmins-google-drivePlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER SSO USER APP GROUP ADMIN SSO ADMIN APP ROLE |
| Google Workspace Groups (Mailing Lists) |
Create or Update Group Add or Remove Users |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-google-group@gitlab-com/corpsys/google-group @corpsysadmins-google-groupPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER SSO USER APP GROUP ADMIN SSO ADMIN APP ROLE |
| Google Workspace Org Config |
Change Management Issue Engineering Issue Service Account Request Sysadmin Access Request |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-google-org@gitlab-com/corpsys/google-org @corpsysadmins-google-orgPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.ADMIN SSO ADMIN APP ROLE |
Jamf MDMgitlab.jamfcloud.com
|
Laptop Setup Instructions Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-jamf@gitlab-com/corpsys/jamf @corpsysadmins-jamfPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.ADMIN SSO ADMIN APP ROLE |
| Linux (OS) |
Laptop Setup Instructions Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-linux@gitlab-com/corpsys/linux @corpsysadmins-linuxPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com. |
| macOS (OS) |
Engineering Issue Onboarding Hardware Ordering Guide Refresh/Replace Guide Repair Guide Wipe (Factory Reset) Guide MacBook Setup Guide (Onboarding 101) Onboarding Software Setup Guide Security Configuration Standards |
Issues
/ Epics
Administration Runbooks corpsys-macos@gitlab-com/corpsys/macos @corpsysadmins-macosPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com. |
| NordLayer VPN |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-vpn@gitlab-com/corpsys/vpn @corpsysadmins-vpnPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER SSO ADMIN SSO |
Okta Applicationsgitlab.okta.com |
New Application (Vendor) Setup Access Request Guide Open an Access Request Engineering Issue New Application Request Update Application Request Deprecate Application Request |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-okta-app@gitlab-com/gl-security/corp/svc/ar @gitlab-com/corpsys/okta-apps @corpsysadmins-okta-appsPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.#security-corpsec-identity (private)USER SSO USER SSO GROUP ADMIN SSO ADMIN APP ROLE |
Okta Groups (for App Assignment)gitlab.okta.com |
Access Request Guide Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-okta-group@gitlab-com/gl-security/corp/svc/ar @gitlab-com/corpsys/okta-groups @corpsysadmins-okta-groupsPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER SSO GROUP ADMIN SSO ADMIN APP ROLE |
Okta Org Configuration and Policiesgitlab.okta.com |
Change Management Issue Engineering Issue Service Account Request Sysadmin Access Request |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-okta-org@gitlab-com/corpsys/okta-org @corpsysadmins-okta-org#security_help#security-corpsec-identity (private)USER SSO USER SSO GROUP ADMIN SSO ADMIN APP ROLE |
Okta SSO and Usersgitlab.okta.com |
2FA and Password Lockout Guide Access Request Guide Open an Access Request Android Setup Guide iOS (iPhone/iPad) Setup Guide Linux Setup Guide macOS Setup Guide Passkey 2FA Setup Guide Touch ID 2FA Setup Guide YubiKey 2FA Setup Guide Provisioning Architecture Frequently Asked Questions (FAQ) Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-okta-user@gitlab-com/corpsys/okta-users @corpsysadmins-okta-usersPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER SSO ADMIN SSO ADMIN APP ROLE |
Okta Workflowsgitlab.okta.com |
Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-okta-flow@gitlab-com/corpsys/okta-flows @corpsysadmins-okta-flows#security_help#security-corpsec-identity (private)ADMIN SSO ADMIN APP ROLE |
Sandbox Cloudgitlabsandbox.cloud |
Self Service Guide Engineering Issue |
Issues
/ Epics
Administration Runbooks corpsys-sandbox-cloud@gitlab-com/corpsys/sandbox-cloud @corpsysadmins-sandbox-cloud#sandbox-cloud-questionsUSER SSO ADMIN SSH |
|
SentinelOne |
Sysadmin Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-sentinelone@gitlab-com/corpsys/sentinelone @corpsysadmins-sentinelonePlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.ADMIN SSO ADMIN APP ROLE |
Slackgitlab.enterprise.slack.com |
Open an Access Request Engineering Issue |
ARs
/ Issues
/ Epics
Administration Runbooks corpsys-slack@gitlab-com/corpsys/slack @corpsysadmins-slackPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com.USER SSO USER APP ADMIN ROLE |
|
YubiKey |
Order a Key (Slack /yubikey)Engineering Issue |
Issues
/ Epics
Administration Runbooks corpsys-yubikey@gitlab-com/corpsys/yubikey @corpsysadmins-yubikeyPlease contact us via the Compass app in Slack (type "Compass" in the top search bar to find it) or it-help@gitlab.com. |
Access Check (accesschk)
Access Control (access.gitlab.systems)
Amazon Web Services (AWS)
Apple macOS
Azure
Backblaze
Demo Systems
GitLab Product Administration for Internal Team Members and Temporary Service Providers
HackyStack (Sandbox Cloud)
Jamf MDM
Laptop VPN for Public Networks and System Administration
Linux Desktop OS
Lumos
Microsoft Windows
Okta Workforce Identity and SSO
SentinelOne Endpoint Detection and Response (EDR)
Slack
Training Systems
Yubikey User Guide
8f22e33f)
