Kubernetes執行者gitlab

Question

是否有人在gitlab上為CI作業成功設置了kubernetes執行器/運行器？ 我設置了我的，但是它無限期地執行我的管道。

我在kubernetes集群上運行了一個作為docker容器的運行程序，並連接到我的gitlab實例以處理我的CI構建。

任何工作的配置文件將不勝感激。

我的跑步者配置如下所示：

[[runners]]
  name = "kube-executor"
  url = "https://gitlab.example.ltd/"
  token = "some-token"
  executor = "kubernetes"
  [runners.cache]
  [runners.kubernetes]
    host = "https://my-kubernetes-api-address:443"
    ca_file = "/etc/ssl/certs/ca.crt"
    cert_file = "/etc/ssl/certs/server.crt"
    key_file = "/etc/ssl/certs/server.key"
    image = "docker:latest"
    namespace = "gitlab"
    namespace_overwrite_allowed = "ci-.*"
    privileged = true
    cpu_limit = "1"
    memory_limit = "1Gi"
    service_cpu_limit = "1"
    service_memory_limit = "1Gi"
    helper_cpu_limit = "500m"
    helper_memory_limit = "100Mi"
    poll_interval = 5
    poll_timeout = 3600
    [runners.kubernetes.volumes]

這將引發此錯誤： ERROR: Job failed (system failure): Post https://my-kubernetes-api-address:443/api/v1/namespaces/gitlab/secrets: x509: certificate signed by unknown authority

Answer 1

您使用的是https，那么證書在哪里，它們是自簽名證書嗎？ 如果是，則必須在配置--tls-cert-file中提及--tls-cert-file和--tls-private-key-file標志。

從https://stackoverflow.com/a/43362697/432115復制