Gitlab Self-Managed Zero-trust - OpenID connect Azure / Workload Identity Federation

Problem to solve

Customer with Zero-trust policy, internal secured self-managed Gitlab EE instance would like to use Workload Identity Federation in Azure for terraform CI/CD pipelines.

• Documentation states:
  Your GitLab instance must be publicly accessible over the internet as Azure must to connect to the GitLab OIDC endpoint.
  https://docs.gitlab.com/ee/ci/cloud_services/azure/index.html

Versions

Please select whether options apply, and add the version information.

• Self-managed
• GitLab.com SaaS

Versions

• GitLab Enterprise Edition v16.9.4-ee

Question

Does anyone know if its viable to use this functionality behind a app proxy or web proxy?

Found these for references, but without any helpful feedback:
#51809
#54980

Hi Steffen, right now I’m having the same question for a different hyperscaler.
Have you tried it out? Is there any feedback?
If not, I’ll make sure to respond here again in case I get the allowance for a PoC.