- Use secondary runners with a Location Aware public URL (Unified URL)
- Use secondary runners with separate URLs
- Handling a Planned Failover with secondary runners
Secondary runners
-
Introduced in GitLab 16.8 with a flag named
geo_proxy_check_pipeline_refs
. Disabled by default. - Enabled by default in GitLab 16.9.
With Geo proxying for secondary sites, it is possible to register a gitlab-runner
with a secondary site. This offloads load from the primary instance.
Use secondary runners with a Location Aware public URL (Unified URL)
Using Location-Aware DNS, with the feature flag enabled works with no extra configuration. After you install and register a runner in the same location as a secondary site, it automatically talks to the closest site, and only proxies to the primary if the secondary is out of date.
Use secondary runners with separate URLs
Using separate secondary URLs, the runners should be:
- Registered with the secondary external URL.
- Configured with
clone_url
set to theexternal_url
of the secondary instance.
Handling a Planned Failover with secondary runners
When executing a planned failover, secondary runners try to keep talking to their local instance. This leads to decreased runner capacity, and may need to be accounted for.
With Location Aware public URL
When using Location-Aware DNS, all runners automatically connect to the closest Geo site.
When failing over to a new primary:
- While the old primary is still in the DNS record, any runners previously connected to your old primary still attempt to pick up jobs from the old primary. If it is unreachable, the runners detect this, and stop requesting for an extended period of time after the instance returns.
- If you have multiple secondary nodes, after the initial failover the remaining secondaries are in an unhealthy state until they are replicated with the new primary. The runners attached to them are then unable to check in, and their health check also kicks in.
- If you remove any of the unhealthy nodes from the Geo DNS entry, the runners pick the next closest instance. Depending on your architecture, this may not be what you want, as you could overwhelm your site in its reduced state.
To alleviate any of these issues, you can pause or shutdown some of the runners until the site is back up to 100%.
If you are not concerned about these issues, there is nothing to do here.
With separate URLs
- If you are returning the old primary to service, you can pause the old primary runners until it is back online. This prevents the health check from kicking in.
- If the old primary is not returning, or you want to avoid temporarily reduced runner capacity, the primary runners should be reconfigured to connect to the new primary.
- If multiple secondaries are being used, the runners should be paused, shutdown, or reconfigured to connect to the new primary while they are being replicated to the new primary.
Pausing runners
You must have administrator access to use any of the following methods:
- Through the Admin area:
- On the left sidebar, at the bottom, select Admin.
- Select Settings > Runners.
- Identify the runners you would like to pause.
- Select the
pause
button next to each runner you would like to pause. - After the failover is complete, unpause the runners you paused in the previous step.
- Use the Runners API:
- Fetch or create a personal access token with administrator access.
- Get the list of runners. You can filter the list using the API.
- Identify the runners you would like to pause, and make note of their
id
. - Follow the API documentation to pause each runner.
- After the failover is complete, unpause the list of runners using the API by setting
paused=false
.