GitLab父子流水线按提交信息与Web按钮触发配置及阻塞问题排查

一、流水线阻塞问题排查与修复 #

流水线阶段执行正常但最终阻塞，核心原因通常是父子流水线状态同步异常或未正确处理子流水线的结束信号，按以下步骤排查修复：

1. 修正子流水线触发策略
   父流水线必须通过strategy: depend明确等待子流水线完成，否则父流水线会提前进入阻塞状态，配置示例：

   trigger-job-1:
     stage: trigger
     trigger:
       include: path/to/job-1-child.yml
       strategy: depend  # 强制父流水线等待子流水线结束
     rules:
       - if: '$CI_COMMIT_MESSAGE =~ /job-1|ubuntu-1/'
   

2. 检查子流水线作业状态
   进入子流水线详情页，确认所有作业无pending/blocked状态：

   • 若子流水线包含未触发的手动作业：要么在父流水线触发时通过变量自动激活，要么将子流水线中该作业的when: manual改为when: never（非必要作业）
   • 若子流水线作业正常结束但父流水线仍阻塞：检查子流水线是否设置了allow_failure: true，导致父流水线无法识别其完成状态

3. 验证Runner配置
   确认GitLab Runner（17.7.0版本）的concurrent值未限制子流水线执行，且Runner未处于离线状态（在项目Settings -> CI/CD -> Runners中查看）。

二、提交信息与WebUI手动触发逻辑实现 #

1. 提交信息触发规则 #

通过rules匹配提交信息中的关键词，触发对应子流水线：

workflow:
  rules:
    - if: '$CI_COMMIT_MESSAGE =~ /job-1|ubuntu-1|job-all|ubuntu-all/'  # 仅匹配指定提交信息时启动流水线
    - if: '$CI_PIPELINE_SOURCE == "web"'  # 允许WebUI手动触发

trigger-job-1:
  stage: trigger
  trigger:
    include: job-1-child.yml
    strategy: depend
  rules:
    - if: '$CI_COMMIT_MESSAGE =~ /job-1|ubuntu-1/'
    - if: '$CI_COMMIT_MESSAGE =~ /job-all|ubuntu-all/'  # 触发全部时执行

trigger-job-2:
  stage: trigger
  trigger:
    include: job-2-child.yml
    strategy: depend
  rules:
    - if: '$CI_COMMIT_MESSAGE =~ /job-all|ubuntu-all/'

2. WebUI手动触发配置 #

通过自定义变量让用户在WebUI选择触发单个或全部子流水线：

variables:
  TRIGGER_TARGET: ""  # 可选值：job-1, job-2, all

workflow:
  rules:
    - if: '$CI_PIPELINE_SOURCE == "web"'
      variables:
        TRIGGER_TARGET:
          description: "选择触发目标"
          options:
            - "job-1"
            - "job-2"
            - "all"
          default: "all"

trigger-job-1:
  stage: trigger
  trigger:
    include: job-1-child.yml
    strategy: depend
  rules:
    - if: '$TRIGGER_TARGET == "job-1" || $TRIGGER_TARGET == "all"'
      when: manual

trigger-job-2:
  stage: trigger
  trigger:
    include: job-2-child.yml
    strategy: depend
  rules:
    - if: '$TRIGGER_TARGET == "job-2" || $TRIGGER_TARGET == "all"'
      when: manual

三、Microsoft Teams无密码通知实现 #

使用Teams Incoming Webhook实现无密码通知，无需额外授权：

1. 创建Teams Webhook
   进入目标Teams频道，点击右上角三个点 → 连接到服务 → 搜索"Incoming Webhook" → 完成配置后复制Webhook URL，在GitLab项目的Settings -> CI/CD -> Variables中添加TEAMS_WEBHOOK_URL变量，值为该URL。

2. 添加流水线通知作业
   创建独立的通知作业，在流水线结束时发送状态消息：

   notify-teams:
     stage: notify
     image: curlimages/curl:latest
     script:
       - |
         curl -X POST -H "Content-Type: application/json" -d '{
           "@type": "MessageCard",
           "@context": "http://schema.org/extensions",
           "themeColor": "'$(if [ "$CI_PIPELINE_STATUS" == "success" ]; then echo "00FF00"; else echo "FF0000"; fi)'",
           "summary": "GitLab流水线状态通知",
           "sections": [
             {
               "activityTitle": "**'$CI_PROJECT_NAME'** 流水线状态：*'$CI_PIPELINE_STATUS'*",
               "activitySubtitle": "提交信息：$CI_COMMIT_MESSAGE",
               "facts": [
                 { "name": "分支", "value": "$CI_COMMIT_BRANCH" },
                 { "name": "查看详情", "value": "$CI_PIPELINE_URL" }
               ]
             }
           ]
         }' $TEAMS_WEBHOOK_URL
     rules:
       - if: '$CI_PIPELINE_STATUS == "success" || $CI_PIPELINE_STATUS == "failed"'
         when: always  # 无论成败都发送通知
     needs: []  # 不依赖其他作业，直接执行
   

完整配置示例 #

workflow:
  rules:
    - if: '$CI_COMMIT_MESSAGE =~ /job-1|ubuntu-1|job-all|ubuntu-all/'
    - if: '$CI_PIPELINE_SOURCE == "web"'

variables:
  TRIGGER_TARGET: ""

stages:
  - trigger
  - notify

trigger-job-1:
  stage: trigger
  trigger:
    include: job-1-child.yml
    strategy: depend
  rules:
    - if: '$CI_COMMIT_MESSAGE =~ /job-1|ubuntu-1/'
    - if: '$CI_COMMIT_MESSAGE =~ /job-all|ubuntu-all/'
    - if: '$TRIGGER_TARGET == "job-1" || $TRIGGER_TARGET == "all"'
      when: manual

trigger-job-2:
  stage: trigger
  trigger:
    include: job-2-child.yml
    strategy: depend
  rules:
    - if: '$CI_COMMIT_MESSAGE =~ /job-all|ubuntu-all/'
    - if: '$TRIGGER_TARGET == "job-2" || $TRIGGER_TARGET == "all"'
      when: manual

notify-teams:
  stage: notify
  image: curlimages/curl:latest
  script:
    - |
      curl -X POST -H "Content-Type: application/json" -d '{
        "@type": "MessageCard",
        "@context": "http://schema.org/extensions",
        "themeColor": "'$(if [ "$CI_PIPELINE_STATUS" == "success" ]; then echo "00FF00"; else echo "FF0000"; fi)'",
        "summary": "GitLab流水线通知",
        "sections": [
          {
            "activityTitle": "**'$CI_PROJECT_NAME'** 流水线状态：*'$CI_PIPELINE_STATUS'*",
            "activitySubtitle": "提交人：$CI_COMMIT_AUTHOR_NAME",
            "facts": [
              { "name": "分支", "value": "$CI_COMMIT_BRANCH" },
              { "name": "流水线链接", "value": "$CI_PIPELINE_URL" }
            ]
          }
        ]
      }' $TEAMS_WEBHOOK_URL
  rules:
    - if: '$CI_PIPELINE_STATUS != "pending"'
      when: always
  needs: []

内容的提问来源于stack exchange，提问作者Dmitry Bondar