K
Q

kubctl not pulling images from public registry but docker pull works

11/4/2019

In the fresh vmware PKS kubernetes cluster, the secret is created for private docker-registry and it works as expected. But the kubectl is not pulling the image from public registry "https://registry-1.docker.io/v2/".

I am connected to corporate network and http_proxy, https_proxy is set to reach internet. The docker login,pull is working but images are not pulled when kubectl deployments are created. The public image is failing for "dduportal/bats:0.4.0". The kubectl describe output is copied to path in the github.

I tried to add the secrets for public docker registry like private seperately. This is pointed out by someone, to keep the secrets seperate incase of pulling images from multiple private regstries. In my case, its public, but still kept separate.

kubectl create secret docker-registry regcred-public --docker-server=registry-1.docker.io --docker-username=<public-user> --docker-password=<token> --docker-email=<myemail>

kubectl create secret docker-registry regcred-private --docker-server=private-registry --docker-username=<private-user> --docker-password=password --docker-email=<myemail>
  1. What could be issue?
  2. how to make my kubectl cluster to pull images from public repository when docker pull from commandline is working without any issues.
  3. There is no clue except the message that it has failed to pull from public registry. It could be better if there is any suggestion from kubernetes cluster.

  4. Is there any rules/configuration required from the cluster end?

    Failed to pull image "dduportal/bats:0.4.0": rpc error: code = Unknown desc = Error response from daemon: Get https://registry-1.docker.io/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)

-- arunp
docker-registry
dockerhub
kubectl
kubernetes-secrets
vmware

Similar Questions

Can I have a K8s pod per user/firm?
Locality LoadBalacing not working on Istio
Traefik Kubernetes WAF
Kubernetes API server requests queue
How should I use externalIPs on service with EKS?

1 Answer

11/5/2019

Problem may lay in incorrect setup of proxy HTTP.

First, create a systemd drop-in directory for the Docker service:

mkdir /etc/systemd/system/docker.service.d

Now create a file called /etc/systemd/system/docker.service.d/http-proxy.conf that adds the HTTP_PROXY environment variable:

[Service]
Environment="HTTP_PROXY=http://proxy.example.com:80/"

If you have internal Docker registries that you need to contact without proxying you can specify them via the NO_PROXY environment variable:

Environment="HTTP_PROXY=http://proxy.example.com:80/"
Environment="NO_PROXY=localhost,127.0.0.0/8,docker-registry.somecorporation.com"

Flush changes:

$ sudo systemctl daemon-reload

Verify that the configuration has been loaded:

$ sudo systemctl show --property Environment docker
Environment=HTTP_PROXY=http://proxy.example.com:80/

Restart Docker:

$ sudo systemctl restart docker

Link to the official Docker documentation for proxy HTTP: docker-http.

-- MaggieO
Source: StackOverflow