Kubernetes executor gitlab

Question

有人成功地在gitlab上为CI作业设置了kubernetes executor/runner吗？我设置了我的，但它无限期地执行我的流水线。

我在kubernetes集群上运行一个runner作为docker容器，并连接到我的gitlab实例来处理CI构建。

任何有效的配置文件都将不胜感激。

我的runner配置如下所示：

[[runners]]
  name = "kube-executor"
  url = "https://gitlab.example.ltd/"
  token = "some-token"
  executor = "kubernetes"
  [runners.cache]
  [runners.kubernetes]
    host = "https://my-kubernetes-api-address:443"
    ca_file = "/etc/ssl/certs/ca.crt"
    cert_file = "/etc/ssl/certs/server.crt"
    key_file = "/etc/ssl/certs/server.key"
    image = "docker:latest"
    namespace = "gitlab"
    namespace_overwrite_allowed = "ci-.*"
    privileged = true
    cpu_limit = "1"
    memory_limit = "1Gi"
    service_cpu_limit = "1"
    service_memory_limit = "1Gi"
    helper_cpu_limit = "500m"
    helper_memory_limit = "100Mi"
    poll_interval = 5
    poll_timeout = 3600
    [runners.kubernetes.volumes]

这会抛出这个错误：ERROR: Job failed (system failure): Post https://my-kubernetes-api-address:443/api/v1/namespaces/gitlab/secrets: x509: certificate signed by unknown authority

Answer 1

您使用的是https，那么证书在哪里?它们是自签名证书吗？如果是，则必须在配置映射中提到--tls-cert-file和--tls-private-key-file标志。

从https://stackoverflow.com/a/43362697/432115复制