Troubleshooting the GitLab Duo Agent Platform

If you are working with the GitLab Duo Agent Platform, you might encounter the following issues.

View logs

After a flow is created, you can view the flow’s session by going to Automate > Sessions.

The Details tab shows a link to the CI/CD job logs. These logs can contain troubleshooting information.

Flows not visible in the UI

If you are trying to run a flow but it’s not visible in the GitLab UI:

1. Ensure you have at least Developer role in the project.

2. Ensure GitLab Duo is turned on and flows are allowed to execute.

3. Ensure the group you are in has been given permission to use flows.

4. If the top-level group is configured correctly but flows are not visible for an individual project:

   1. Go to the project.
   2. Select Automate > Flows.
   3. In the upper-right corner, select Enable flow from group.
   4. Select a flow, then select Enable.

5. If it still does not work:

   1. Disable the affected flow in the top-level group and save the configuration.
   2. Enable the affected flow in the top-level group and save the configuration.
   3. Wait a few minutes for the setting to propagate across your groups.

Insufficient permissions to create a new pipeline for imported projects

If you are trying to run foundational flows in an imported project or a project created from a template, you might get the error: Error in creating workload: Insufficient permissions to create a new pipeline.

To fix this issue:

1. Go to the top-level group.
2. Select Settings > General.
3. Expand GitLab Duo features.
4. Under Flow execution, identify the foundational flows you want to turn on.
5. Disable the flows in the top-level group and save the configuration.
6. Enable the same flows in the top-level group and save the configuration.
7. Wait a few minutes for the setting to propagate across projects in the group.

Session is stuck in created state

If a session for your flow does not start:

• Ensure push rules are configured.

Configure push rules to allow a service account

In the GitLab UI, foundational flows use a service account that:

• Creates commits with its own email address.
• Creates a workload pipeline.

Prerequisites:

• Administrator access.

To configure push rules for a project:

1. Find the email address associated with the service account:

   1. In the upper-right corner, select Admin.
   2. Select Overview > Users and search for the account associated with the flow. The account follows the pattern duo-[flow-name]-[top-level-group-name].
   3. Locate the service account user and copy the email address.

2. Allow the email address to push to the project:

   1. On the top bar, select Search or go to and find your project.
   2. Select Settings > Repository.
   3. Expand Push rules.
   4. In Commit author’s email, add a regular expression that allows the email address you just copied.
   5. Select Save push rules.

3. Allow the duo/feature/ branch prefix:

   1. In the Push rules section, find Branch name.
   2. Add a regular expression that allows branches starting with ^duo/(fix|feature|refactor|docs/).* For example: ^(duo/feature)/.*$
   3. Select Save push rules.

To create push rules for the instance:

1. In the upper-right corner, select Admin.
2. Select Push rules.
3. Follow the previous steps to allow Commit author’s email and Branch name.
4. Select Save push rules.