diff options
| author | Alexander Strachan <astrachan@gitlab.com> | 2019-04-03 09:01:44 +0000 |
|---|---|---|
| committer | Evan Read <eread@gitlab.com> | 2019-04-03 09:01:44 +0000 |
| commit | ecae2c48920d76623be0019e19cea919d3e4cb28 (patch) | |
| tree | 967c47a0c95b6aac9e905d41f3af490826b5f463 | |
| parent | aeeba4be36dae819b68c03909bff8ab896117bd9 (diff) | |
| download | gitlab-ce-ecae2c48920d76623be0019e19cea919d3e4cb28.tar.gz | |
Resolve "Add troubleshooting section to capture errors with installing applications to a Kubernetes cluster"
| -rw-r--r-- | doc/user/project/clusters/index.md | 29 |
1 files changed, 23 insertions, 6 deletions
diff --git a/doc/user/project/clusters/index.md b/doc/user/project/clusters/index.md index 3a9a3b4a423..c94a3f4d3b5 100644 --- a/doc/user/project/clusters/index.md +++ b/doc/user/project/clusters/index.md @@ -314,12 +314,6 @@ install it manually. ## Installing applications -NOTE: **Note:** -Before starting the installation of applications, make sure that time is synchronized -between your GitLab server and your Kubernetes cluster. Otherwise, installation could fail -and you may get errors like `Error: remote error: tls: bad certificate` -in the `stdout` of pods created by GitLab in your Kubernetes cluster. - GitLab provides a one-click install for various applications which can be added directly to your configured cluster. Those applications are needed for [Review Apps](../../../ci/review_apps/index.md) and @@ -378,6 +372,29 @@ Upgrades will reset values back to the values built into the `runner` chart plus the values set by [`values.yaml`](https://gitlab.com/gitlab-org/gitlab-ce/blob/master/vendor/runner/values.yaml) +### Troubleshooting applications + +Applications can fail with the following error: + +```text +Error: remote error: tls: bad certificate +``` + +To avoid installation errors: + +- Before starting the installation of applications, make sure that time is synchronized + between your GitLab server and your Kubernetes cluster. +- Ensure certificates are not out of sync. When installing applications, GitLab expects a new cluster with no previous installation of Tiller. + + You can confirm that the certificates match via `kubectl`: + + ```sh + kubectl get configmaps/values-content-configuration-ingress -n gitlab-managed-apps -o \ + "jsonpath={.data['cert\.pem']}" | base64 -d > a.pem + kubectl get secrets/tiller-secret -n gitlab-managed-apps -o "jsonpath={.data['ca\.crt']}" | base64 -d > b.pem + diff a.pem b.pem + ``` + ## Getting the external endpoint NOTE: **Note:** |