如何使用 K8S 從 Jfrog Artifactory 中提取 docker 圖像

Question

我在 EC2 上的 Jfrog 工件中有一個本地存儲庫。 當我嘗試僅使用 docker 拉動圖像時，一切順利，但是當我嘗試使用 K8S 部署拉動它時。yaml 我得到ImagePullBackOff ，這是在 pod 上運行描述時的日志。 關於可能是什么問題的任何想法？ 謝謝。

Events:
Type     Reason     Age                     From               Message
----     ------     ----                    ----               -------
Normal   Scheduled  8m50s                   default-scheduler  Successfully  assigned default/weatherapp-dep-6f79c6c774-kln95 to ip-172-31-23-92
Normal   Pulling    7m27s (x4 over 8m49s)   kubelet            Pulling image "54.235.13.197:80/moodyslocaldockerhub/weatherappjdka:v1.49"
Warning  Failed     7m27s (x4 over 8m49s)   kubelet            Failed to pull image "54.235.13.197:80/moodyslocaldockerhub/weatherappjdka:v1.49": rpc error: code = Unknown desc = failed to pull and unpack image "54.235.13.197:80/moodyslocaldockerhub/weatherappjdka:v1.49": failed to resolve reference "54.235.13.197:80/moodyslocaldockerhub/weatherappjdka:v1.49": failed to do request: Head https://54.235.13.197:80/v2/moodyslocaldockerhub/weatherappjdka/manifests/v1.49: remote error: tls: alert(112)
Warning  Failed     7m27s (x4 over 8m49s)   kubelet            Error: ErrImagePull
Warning  Failed     7m1s (x6 over 8m48s)    kubelet            Error: ImagePullBackOff
Normal   BackOff    3m44s (x20 over 8m48s)  kubelet            Back-off pulling image "54.235.13.197:80/moodyslocaldockerhub/weatherappjdka:v1.49"

Answer 1

您需要提供imagePullSecret或具有存儲庫憑據的服務帳戶。

---

清單看起來像這樣

apiVersion: v1
kind: Secret
metadata:
  name: myregistrykey
  namespace: awesomeapps
data:
  .dockerconfigjson: <base64_of_credentials>
type: kubernetes.io/dockerconfigjson

或者使用此命令生成它

kubectl create secret docker-registry regcred --docker-server=<your-registry-server> --docker-username=<your-name> --docker-password=<your-pword> --docker-email=<your-email>

---

然后你安裝秘密

apiVersion: v1
kind: Pod
metadata:
  name: private-reg
spec:
  containers:
  - name: private-reg-container
    image: <your-private-image>
  imagePullSecrets:
  - name: regcred