GitLab Cloud overview

The GitLab Cloud connector indexes content from GitLab.com (SaaS) so your team can find merge requests, code, issues, wikis, and epics through permission-aware search and Glean Assistant. Glean connects to the GitLab REST API over HTTPS using a personal access token, crawls the projects and groups the token can reach, and enforces GitLab's own permissions at query time so users only see what they can already see in GitLab.

For a product-level overview of the connector, see the GitLab integration page.

To connect the connector, see Setup.

Supported objects

Glean indexes the following GitLab objects. Merge requests, code, issues, and wikis are always indexed and have no setup toggles. Epics are also indexed by default, controlled by a Crawl epics toggle on the connector setup page that you can clear if you don't want epics indexed.

Merge requests

• Merge request title, description, and state.
• Merge request comments (notes).
• Merge request diffs.
• Author, and project the merge request belongs to.

Code

• Repository file contents on the default branch, made searchable through Code Search.
• Commit messages on the default branch.

Issues

• Issue title, description, and state.
• Issue comments (notes).
• Author, and project the issue belongs to.

Wikis

• Wiki page title and body.
• Only pages whose file body is .md or .txt are indexed.

Epics

• Epic title, description, and state.

Limitations

• Merge requests (with comments and diffs), code, issues, and wikis cannot be selectively enabled or disabled — they are always indexed. Epics are the only object type with a setup toggle: the Crawl epics option on the connector setup page controls whether epics are indexed, and it is selected by default.
• Only file content on the default branch is indexed for code and commit messages. Other branches are not crawled.
• Wiki indexing covers pages whose file body is .md or .txt; other file types in a wiki are not indexed.
• Snippets and standalone milestones are not supported.
• There are no greenlist (inclusion) or redlist (exclusion) content filters exposed in the setup UI. Namespace-level allow and block lists can be configured with help from Glean Support.
• The GitLab API does not return user email addresses, so a user-mapping CSV is required to enforce permissions correctly. See Permissions and security.

Permissions and security

How permissions are enforced

Glean mirrors GitLab's permission model. For each project, Glean reads the project's membership from the GitLab API and grants access in Glean to the same users. Permissions are evaluated at query time, so a user only sees GitLab content in Glean that they are entitled to see in GitLab.

Why a user-mapping CSV is required

The GitLab REST API does not expose user email addresses, so Glean cannot automatically map a GitLab user ID to the person's company identity (their SSO email). To bridge this, you upload a user-mapping CSV during setup that maps each numeric GitLab user ID to the corresponding company email. Without it, Glean cannot resolve GitLab memberships to Glean users and permissions cannot be enforced. See Build the user-mapping file.

Data access model

• The connector is read-only — Glean never creates, modifies, or deletes content in GitLab.
• Authentication uses a personal access token sent as a bearer token over HTTPS.
• Content is indexed from the projects the token can access, subject to the token's scopes.

Crawling and freshness

Full crawls

Glean periodically re-enumerates all accessible projects and their content in a full crawl, which runs approximately every 28 days.

Incremental crawls

Between full crawls, Glean runs scheduled incremental crawls approximately hourly to pick up new and changed content.

Webhook-driven updates

When the token has the api scope, Glean automatically registers webhooks in GitLab, so changes are reflected in approximately 10 minutes. With read-only scopes you create webhooks manually to get the same near-real-time updates. See Create webhooks manually.

Identity crawls

User and membership data is refreshed hourly so permission changes in GitLab propagate to Glean.

note

GitLab enforces API rate limits. Glean throttles its crawl to stay within those limits, backing off in response to GitLab's rate-limit responses.

Use cases and example queries

• Find a merge request by topic: "merge request adding retry logic to the billing service".
• Locate code: search a function or file name to jump straight to the implementation on the default branch.
• Recover a decision: "why did we switch the auth library" surfaces the relevant MR discussion and issue comments.
• Track work: "open issues in the payments project" or "epic for Q3 search improvements".