Charmed Kubernetes Vault integration not working when trying to pull image from private registry

5/13/2020

I have installed charmed kubernetes on a microstack/openstack environment. After having followed tutorials Private Registry and Using Vault, I tried to create a deployment where I pull an image file from this private registry, getting error:

Warning Failed 9m23s (x4 over 10m) kubelet, juju-5925d9-k8s-paul-8 Failed to pull image "registry_ip:registry_port/defaultbackend-amd64:1.5": rpc error: code = Unknown desc = failed to pull and unpack image "registry_ip:registry_port/defaultbackend-amd64:1.5": failed to resolve reference "registry_ip:registry_port/defaultbackend-amd64:1.5": failed to do request: Head https://registry_ip:registry_port/v2/defaultbackend-amd64/manifests/1.5: remote error: tls: bad certificate

I put up

juju add-relation vault:certificates docker-registry

and thought that that would take care of the certification problem, but it obviously doesn't. However, it installs a juju-docker-registry.pem certificate on the worker nodes, but this does not solve it either. I also gather that it is more a problem of the docker-registry server not trusting the certificate authority. Can anybody help me here ?

-- Paul Rousseau
charmed-kubernetes
docker-registry
hashicorp-vault
juju

0 Answers