Как я настраивал свой односерверный локальный кластер Kubernetes

services:
  nginx-proxy: 
    image: nginxproxy/nginx-proxy
    restart: always
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - "./my_custom_proxy_settings.conf:/etc/nginx/conf.d/my_custom_proxy_settings.conf"

К нему настройку для загрузки больших файлов ./my_custom_proxy_settings.conf состоящий из 1 строки

client_max_body_size 1G;

name: "gitlab-local"

networks:
  gitlab-network:
    driver: bridge
  nginx-proxy_default:
    external: true

services:
  gitlab:
    image: gitlab/gitlab-ee:latest
    container_name: gitlab
    restart: always
    hostname: 'gitlab.local'
    environment:
      VIRTUAL_HOST: "gitlab.local"
      VIRTUAL_PORT: 80
      GITLAB_OMNIBUS_CONFIG: |
        # Add any other gitlab.rb configuration here, each on its own line
        external_url 'http://gitlab.local' 
        registry['enable'] = true
        registry_external_url 'https://gitlab.local:5050'
        
        registry_nginx['ssl_certificate'] =  "/etc/gitlab/gitlab.local.crt"
        registry_nginx['ssl_certificate_key'] = "/etc/gitlab/gitlab.local.key"
    ports:
      - '5050:5050'
    volumes:
      - './gitlab-data/config:/etc/gitlab'
      - './gitlab-data/logs:/var/log/gitlab'
      - './gitlab-data/data:/var/opt/gitlab'
      
      - './gitlab-data/certificate.crt:/etc/gitlab/gitlab.local.crt'
      - './gitlab-data/privateKey.key:/etc/gitlab/gitlab.local.key'
    shm_size: '256m'
    networks:
      - gitlab-network 
      - nginx-proxy_default

  # RUNNER
  gitlab-runner:
    image: gitlab/gitlab-runner
    container_name: gitlab-runner
    restart: always
    depends_on:
      - gitlab
    volumes:
      - ./gitlab-runners/config:/etc/gitlab-runner
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - gitlab-network
      - nginx-proxy_default

Здесь и далее везде где мне требуется 80/443 порты, я подключаю к образам сеть nginx-proxy_default.

concurrent = 20 # A global setting for job concurrency that applies to all runner sections defined in this `config.toml` file
log_level = "warning" 
check_interval = 3 # Value in seconds

[[runners]]
  name = "Runner1"
  url = "http://gitlab"
  executor = "docker"
  token = "<SECRET_TOKEN>"
  [runners.docker]
    tls_verify = false
    image = "gitlab/gitlab-runner:latest"
    priviledged = true
    disable_cache = false
    volumes = ["/cache"]
    pull_policy = "if-not-present"
    cache_dir = "/cache/gitlab"
    network_mode = "host"

SECRET_TOKEN - получается в gitlab при создании ранера.

services:
  sonarqube:
    image: sonarqube:community
    restart: always
    hostname: sonarqube
    container_name: sonarqube
    read_only: true
    depends_on:
      db:
        condition: service_healthy
    environment:
      SONAR_JDBC_URL: jdbc:postgresql://db:5432/sonar
      SONAR_JDBC_USERNAME: sonar
      SONAR_JDBC_PASSWORD: sonar
      VIRTUAL_HOST: "sonarqube.local"
      VIRTUAL_PORT: 9000
    volumes:
      - sonarqube_data:/opt/sonarqube/data
      - sonarqube_extensions:/opt/sonarqube/extensions
      - sonarqube_logs:/opt/sonarqube/logs
      - sonarqube_temp:/opt/sonarqube/temp
    networks:
      - sonarqube-network
      - nginx-proxy_default
  db:
    image: postgres:17
    restart: always
    healthcheck:
      test: ["CMD-SHELL", "pg_isready"]
      interval: 10s
      timeout: 5s
      retries: 5
    hostname: postgresql
    container_name: postgresql
    environment:
      POSTGRES_USER: sonar
      PGUSER: sonar
      POSTGRES_PASSWORD: sonar
      POSTGRES_DB: sonar
    volumes:
      - postgresql:/var/lib/postgresql
      - postgresql_data:/var/lib/postgresql/data
    networks:
      - sonarqube-network
      - nginx-proxy_default


networks:
  sonarqube-network:
    driver: bridge
  nginx-proxy_default:
    external: true

volumes:
  sonarqube_data:
    driver: "local"
    driver_opts:
      o: bind
      device: "./data/sonarqube-data"
      type: none
  sonarqube_temp:
    driver: local
    driver_opts:
      o: bind
      device: "./data/sonarqube-temp"
      type: none
  sonarqube_extensions:
    driver: local
    driver_opts:
      o: bind
      type: none
      device: "./data/sonarqube-extensions"
  sonarqube_logs:
    driver: local
    driver_opts:
      o: bind
      type: none
      device: "./data/sonarqube-logs"
  postgresql:
    driver: local
    driver_opts:
      o: bind
      type: none
      device: "./data/postgresql"
  postgresql_data:
    driver: "local"
    driver_opts:
      o: bind
      device: "./data/postgres-data"
      type: none