Kubernetes Executor & Internal Certificate Authority

Hi All,

I am running self hosted Gitlab 14.1 and my gitlab runners are running on a connected kubernetes cluster and have my internal CA installed and working, my runners are registered and working, except… the helper and build containers that get spun up don’t contain my internal CA cert so fails to pull containers from my internal gitlab registry.

So far I have tried adding the certificate to /etc/gitlab-runner/certs/ca.crt and /etc/gitlab-runner/certs/.crt using kubernetes secrets volumes. I can validate that the certs are definately there by logging on to the helper and build containers but they seem to have no effect.

Does anyone else have any experience in this area or can advise where the CA cert needs to be mounted to be effective on the build and helper containers?

Hi there,

I am working with Gitlab 14.7 now and I am having this exact same issue. I was wondering if you were ever able to determine a solution?

I have tried a similar list of things you described and I even tried creating our own version of the helper image that contains our custom CA cert. Unfortunately that hasn’t had any effect either

Sadly no dice, I eventually had to move on to other things.