After upgrading from 9.5.1, our gitlab shell runners can no longer clone remote repos. These failures occur with 9.x and 10.0 runners. The error messages look like:
fatal: unable to access 'https://gitlab-ci-token:email@example.com/my-proj/orchestrator.git/': TCP connection reset by peer
We can manually curl the affected urls by forcing TLS 1.2 but are unsure how to convince the shell runner to also use TLS 1.2 when cloning repos.
The runners are currently execluted from and OEL 7.4 host.