New Gitlab CE Cluster Configuration

Setup Helm and Tiller

kubectl create -f rbac-config.yaml
helm init --upgrade --service-account tiller
kubectl -n kube-system patch deployment tiller-deploy -p '{"spec": {"template": {"spec": {"automountServiceAccountToken": true}}}}'


Setup UI

kubectl get secret -n kube-system
kubectl describe secret your-username-token-12345 -n kube-system
kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/master/aio/deploy/recommended/kubernetes-dashboard.yaml

// URL : http://localhost:8080/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/#!/login



Connect to Cluster

kubectl --kubeconfig='kubeconfig.yaml' --port=8080 proxy


Prepare to copy SUPER FAST loadbalancer-ip into dns

Install Gitlab CE Cluster
helm repo add gitlab https://charts.gitlab.io/
helm repo update
helm --namespace=gitlab upgrade --install gitlab gitlab/gitlab
--timeout 600
--set global.hosts.domain=jjztechnologies.com
--set certmanager.install=true
--set gitlab-runner.runners.namespace=gitlab
--set gitlab-runner.runners.privileged=true
--set global.ingress.annotations."kubernetes.io/tls-acme"=true
--set certmanager-issuer.email=james@jjztechnologies.com
--set gitlab.migrations.image.repository=registry.gitlab.com/gitlab-org/build/cng/gitlab-rails-ce
--set gitlab.sidekiq.image.repository=registry.gitlab.com/gitlab-org/build/cng/gitlab-sidekiq-ce
--set gitlab.unicorn.image.repository=registry.gitlab.com/gitlab-org/build/cng/gitlab-unicorn-ce
--set gitlab.unicorn.workhorse.image=registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ce
--set gitlab.task-runner.image.repository=registry.gitlab.com/gitlab-org/build/cng/gitlab-task-runner-ce
--set gitlab.gitaly.persistence.size=100Gi
--set minio.persistence.size=200Gi
--set redis.persistence.size=25Gi

Initial Login
kubectl --namespace=gitlab get secret gitlab-gitlab-initial-root-password -ojsonpath={.data.password} | base64 --decode ; echo

Add private registry auth
kubectl --namespace=gitlab create secret docker-registry jjztechnologies-registry
--docker-server=registry.jjztechnologies.com
--docker-username=root
--docker-password=Rg6Zp24vf8mtczcSX3kbc8KTANAsirMA7At9kqZa2gNHmOGh7w110yhU9h7Bc5lz
--docker-email=james@jjztechnologies.com