Kubernetes minikube可以';t访问远程港口注册
即使使用Kubernetes minikube可以';t访问远程港口注册,kubernetes,docker-registry,minikube,harbor,Kubernetes,Docker Registry,Minikube,Harbor,即使使用minikube start--unsecure registry”“启动minikube,当尝试运行包含image路径(如/app/server)的部署yaml文件时,也出现错误: 未能拉取映像“[HARBOR\u IP]/app/server”:rpc错误:code=2 desc=来自后台程序的错误响应:{“message”:“Get:dial tcp[HARBOR\u IP]:443:getsockopt:连接被拒绝”} 错误同步pod 如何在minikube中正确设置不安全的注册
minikube start--unsecure registry”“
启动minikube,当尝试运行包含image
路径(如/app/server
)的部署yaml文件时,也出现错误:
未能拉取映像“[HARBOR\u IP]/app/server”:rpc错误:code=2 desc=来自后台程序的错误响应:{“message”:“Get:dial tcp[HARBOR\u IP]:443:getsockopt:连接被拒绝”}
错误同步pod
如何在minikube中正确设置不安全的注册表
编辑 使用80端口标记当前docker映像:
docker tag server <HARBOR_HOST_IP>:80/app/server
docker标签服务器:80/app/server
将其推送到Harbor注册表服务器:
docker push <HARBOR_HOST_IP>:80/app/server
docker推送:80/app/server
很遗憾,远程端口主机被拒绝:
The push refers to a repository [<HARBOR_HOST_IP>:80/app/server]
00491a929c2e: Preparing
ec4cc3fab4be: Preparing
e7d3ac95d998: Preparing
8bb050c3d78d: Preparing
4aa9e88e4148: Preparing
978b58726b5e: Waiting
2b0fb280b60d: Waiting
denied: requested access to the resource is denied
推送指的是存储库[:80/app/server]
00491a929c2e:准备
ec4cc3fab4be:准备
e7d3ac95d998:准备
8bb050c3d78d:准备
4aa9e88e4148:准备
978b58726b5e:正在等待
2b0fb280b60d:正在等待
拒绝:请求的对资源的访问被拒绝
甚至将
:80
添加到本地不安全注册表
列表中。如果您在与端口80上工作的docker注册表通信时始终定义端口80,那么它就起作用了
建立一个形象:
docker build -t <REGISTRY_IP>:80/<name> <path>
其中test.yaml
为:
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: test
spec:
template:
metadata:
labels:
app: test
spec:
containers:
- image: 192.168.1.11:80/<name>
name: test
imagePullPolicy: Always
apiVersion:extensions/v1beta1
种类:部署
元数据:
名称:测试
规格:
模板:
元数据:
标签:
应用程序:测试
规格:
容器:
-图片:192.168.1.11:80/
名称:测试
imagePullPolicy:始终
如果在与在端口80上工作的docker注册表通信时始终定义端口80,则该功能正常
建立一个形象:
docker build -t <REGISTRY_IP>:80/<name> <path>
其中test.yaml
为:
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: test
spec:
template:
metadata:
labels:
app: test
spec:
containers:
- image: 192.168.1.11:80/<name>
name: test
imagePullPolicy: Always
apiVersion:extensions/v1beta1
种类:部署
元数据:
名称:测试
规格:
模板:
元数据:
标签:
应用程序:测试
规格:
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: test
spec:
template:
metadata:
labels:
app: test
spec:
containers:
- image: 192.168.1.11:80/<name>
name: test
imagePullPolicy: Always
kubectl create secret docker-registry regcred --docker-server=<your-registry-server> --docker-username=<your-name> --docker-password=<your-pword> --docker-email=<your-email>
apiVersion: v1
kind: Pod
metadata:
name: private-reg
spec:
containers:
- name: private-reg-container
image: <your-private-image>
imagePullSecrets:
- name: regcred