k8s 从私有仓库摘取镜像报错 with ErrImagePull: "rpc error: code = Unknown desc = Error response from daemon: Get http://*.*.*.*:5000/v2/: net/http: HTTP/1.x transport connection broken: malformed HTTP response \"\\x15\\x03\\x01\\x00\\x02\\x02\""

docker 私有仓库地址配置

cat /etc/docker/daemon.json

{

"registry-mirrors": ["http://f1361db2.m.daocloud.io","https://docker.mirrors.ustc.edu.cn"],

"insecure-registries":["172.10.10.10:5000","172.10.10.11:5000"],

"max-concurrent-downloads": 20

}

配置完成后重启docker

systemctl restart docker

登录Docker

docker login 172.10.10.10:5000

输入用户名、密码后登录成功，查看 ~/.docker/config.json会看到如下：

cat ~/.docker/config.json

{

"auths": {

"172.10.10.10:5000": {

"auth": "ZG9j...Y2tlcg=="

},

"172.10.10.11:5000": {

"auth": "YWR...RtaW4="

}

},

"HttpHeaders": {

"User-Agent": "Docker-Client/18.03.1-ce (linux)"

}

}

我有两个私库，如果只有一个私库应该是这样：

{

"auths": {

"172.10.10.10:5000": {

"auth": "ZG9...2tlcg=="

}

},

"HttpHeaders": {

"User-Agent": "Docker-Client/18.03.1-ce (linux)"

}

}

创建一个Secret来保存你的验证口令

创建一个名为dockercfg-192的secret

kubectl create secret docker-registry dockercfg-192 --docker-server=172.10.10.10:5000 --docker-username=username --docker-password=password --docker-email=m@m.com.cn

--docker-server 是你的私有仓库

--docker-username 是你的 Docker 用户名

--docker-password 是你的 Docker 密码

--docker-email 是你的 Docker 邮箱

查看创建的dockercfg-192

kubectl get secret |grep dockercfg-192

dockercfg-192 kubernetes.io/dockerconfigjson 1 16h

创建一个Deployment来自私库的镜像

cat my-nginx-2.yaml

apiVersion: extensions/v1beta1

kind: Deployment

metadata:

name: my-nginx-97

spec:

replicas: 2

template:

metadata:

labels:

run: my-nginx-97

spec:

containers:

- name: my-nginx-97

image: 172.10.10.10:5000/test/nginx-lb:1.7.9

ports:

- containerPort: 80

imagePullSecrets:

- name: dockercfg-192

imagePullSecrets 告诉 Kubernets 应该从名为 dockercfg-192 的 Secret 里获取验证口令

运行命令创建

kubectl create -f my-nginx-2.yaml

[root@kube-node1 work]# kubectl get pods -o wide

NAME READY STATUS RESTARTS AGE IP NODE

my-nginx-97-658cb94796-6qwjs 1/1 Running 0 55m 172.30.75.4 kube-node2

my-nginx-97-658cb94796-mxpxp 1/1 Running 0 55m 172.30.20.2 kube-node4