K8s pod ImagePullBackoff

Question

创建了一个非常简单的 nginx pod 并运行进入状态 ImagePullBackoff

Events:
  Type     Reason     Age                   From               Message
  ----     ------     ----                  ----               -------
  Normal   Scheduled  32m                   default-scheduler  Successfully assigned reloader/nginx to aks-appnodepool1-22779252-vmss000000
  Warning  Failed     29m                   kubelet            Failed to pull image "nginx": rpc error: code = Unknown desc = failed to pull and unpack image "docker.io/library/nginx:latest": failed to resolve reference "docker.io/library/nginx:latest": failed to do request: Head "https://registry-1.docker.io/v2/library/nginx/manifests/latest": dial tcp 52.200.78.26:443: i/o timeout
  Warning  Failed     27m                   kubelet            Failed to pull image "nginx": rpc error: code = Unknown desc = failed to pull and unpack image "docker.io/library/nginx:latest": failed to resolve reference "docker.io/library/nginx:latest": failed to do request: Head "https://registry-1.docker.io/v2/library/nginx/manifests/latest": dial tcp 52.21.28.242:443: i/o timeout
  Warning  Failed     23m                   kubelet            Failed to pull image "nginx": rpc error: code = Unknown desc = failed to pull and unpack image "docker.io/library/nginx:latest": failed to resolve reference "docker.io/library/nginx:latest": failed to do request: Head "https://registry-1.docker.io/v2/library/nginx/manifests/latest": dial tcp 3.223.210.206:443: i/o timeout
  Normal   Pulling    22m (x4 over 32m)     kubelet            Pulling image "nginx"
  Warning  Failed     20m (x4 over 29m)     kubelet            Error: ErrImagePull
  Warning  Failed     20m                   kubelet            Failed to pull image "nginx": rpc error: code = Unknown desc = failed to pull and unpack image "docker.io/library/nginx:latest": failed to resolve reference "docker.io/library/nginx:latest": failed to do request: Head "https://registry-1.docker.io/v2/library/nginx/manifests/latest": dial tcp 3.228.155.36:443: i/o timeout
  Warning  Failed     20m (x7 over 29m)     kubelet            Error: ImagePullBackOff
  Warning  Failed     6m41s                 kubelet            Failed to pull image "nginx": rpc error: code = Unknown desc = failed to pull and unpack image "docker.io/library/nginx:latest": failed to resolve reference "docker.io/library/nginx:latest": failed to do request: Head "https://registry-1.docker.io/v2/library/nginx/manifests/latest": dial tcp 52.5.157.114:443: i/o timeout
  Normal   BackOff    2m17s (x65 over 29m)  kubelet            Back-off pulling image "nginx"

已检查网络状态：

同一子网中的VM可以访问“https://registry-1.docker.io/v2/library/nginx/manifests/latest”并且telnet 52.5.157.114 443成功。
docker pull nginx 在同一子网中的 VM 上成功。
kubectl exec 到同一集群中的运行ning pod 可以 wget https://registry-1.docker.io/v2/library/nginx/manifests/latest 成功。 . 可能的问题是什么？

Answer 1

当我wget/curl或任何您想访问的内容

https://registry-1.docker.io/v2/library/nginx/manifests/latest

它说

{"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":[{"Type":"repository","Class":"","Name":"library/nginx","Action":"pull"}]}]}

然而，这是因为您需要登录才能从该存储库中提取该图像。

2个解决方案：

第一个很简单，在图像字段中只需将 url 替换为 nginx:latest 就可以了

第二种：创建regcred

Answer 2

在您的 pod yaml 中，将 image : docker.io/library/nginx:latest 更改为 docker.io/nginx:latest

Answer 3

原来是防火墙掉包了。

K8s pod ImagePullBackoff

K8s pod ImagePullBackoff

kubernetes