diff options
author | GitLab Bot <gitlab-bot@gitlab.com> | 2020-02-05 03:08:41 +0300 |
---|---|---|
committer | GitLab Bot <gitlab-bot@gitlab.com> | 2020-02-05 03:08:41 +0300 |
commit | e40710ab8a30f36d7c82d7d6497033291840eec9 (patch) | |
tree | aea450b24cb1bd8023c1d297e4f01de4e88926b2 /doc/administration | |
parent | 51612d3ef5be853289008694c40973b479e8547c (diff) |
Add latest changes from gitlab-org/gitlab@master
Diffstat (limited to 'doc/administration')
-rw-r--r-- | doc/administration/troubleshooting/gitlab_rails_cheat_sheet.md | 12 | ||||
-rw-r--r-- | doc/administration/troubleshooting/ssl.md | 27 |
2 files changed, 39 insertions, 0 deletions
diff --git a/doc/administration/troubleshooting/gitlab_rails_cheat_sheet.md b/doc/administration/troubleshooting/gitlab_rails_cheat_sheet.md index 7bffe00a969..49f42ed1238 100644 --- a/doc/administration/troubleshooting/gitlab_rails_cheat_sheet.md +++ b/doc/administration/troubleshooting/gitlab_rails_cheat_sheet.md @@ -126,6 +126,18 @@ Benchmark.bm do |x| end ``` +## Feature flags + +### Show all feature flags that are enabled + +```ruby +# Regular output +Feature.all + +# Nice output +Feature.all.map {|f| [f.name, f.state]} +``` + ## Command Line ### Check the GitLab version fast diff --git a/doc/administration/troubleshooting/ssl.md b/doc/administration/troubleshooting/ssl.md index 98d144e012f..ea17116d422 100644 --- a/doc/administration/troubleshooting/ssl.md +++ b/doc/administration/troubleshooting/ssl.md @@ -46,6 +46,21 @@ After configuring a GitLab instance with an internal CA certificate, you might n If you have the problems listed above, add your certificate to `/etc/gitlab/trusted-certs` and run `sudo gitlab-ctl reconfigure`. +## Using GitLab Runner with a GitLab instance configured with internal CA certificate or self-signed certificate + +Besides getting the errors mentioned in +[Using an internal CA certificate with GitLab](ssl.md#using-an-internal-ca-certificate-with-gitlab), +your CI pipelines may stuck stuck in `Pending` status. In the runner logs you may see the below error: + +```shell +Dec 6 02:43:17 runner-host01 gitlab-runner[15131]: #033[0;33mWARNING: Checking for jobs... failed +#033[0;m #033[0;33mrunner#033[0;m=Bfkz1fyb #033[0;33mstatus#033[0;m=couldn't execute POST against +https://gitlab.domain.tld/api/v4/jobs/request: Post https://gitlab.domain.tld/api/v4/jobs/request: +x509: certificate signed by unknown authority +``` + +If you face similar problem, add your certificate to `/etc/gitlab-runner/certs` and restart the runner via `gitlab-runner restart`. + ## Mirroring a remote GitLab repository that uses a self-signed SSL certificate **Scenario:** When configuring a local GitLab instance to [mirror a repository](../../user/project/repository/repository_mirroring.md) from a remote GitLab instance that uses a self-signed certificate, you may see the `SSL certificate problem: self signed certificate` error in the UI. @@ -79,6 +94,18 @@ To fix this problem: - Add the self-signed certificate from the remote GitLab instance to the `/etc/gitlab/trusted-certs` directory on the local GitLab instance and run `sudo gitlab-ctl reconfigure` as per the instructions for [installing custom public certificates](https://docs.gitlab.com/omnibus/settings/ssl.html#install-custom-public-certificates). - If your local GitLab instance was installed using the Helm Charts, you can [add your self-signed certificate to your GitLab instance](https://docs.gitlab.com/runner/install/kubernetes.html#providing-a-custom-certificate-for-accessing-gitlab). +You may also get another error when trying to mirror a repository from a remote GitLab instance that uses a self-signed certificate: + +```shell +2:Fetching remote upstream failed: fatal: unable to access &#39;https://gitlab.domain.tld/root/test-repo/&#39;: +SSL: unable to obtain common name from peer certificate +``` + +In this case, the problem can be related to the certificate itself: + +- Double check that your self-signed certificate is not missing a common name. If it is then regenerate a valid certificate +- add it to `/etc/gitlab/trusted-certs` and run `sudo gitlab-ctl reconfigure` + ## Unable to perform Git operations due to an internal or self-signed certificate If your GitLab instance is using a self-signed certificate, or the certificate is signed by an internal certificate authority (CA), you might run into the following errors when attempting to perform Git operations: |