harbor 总是走https的问题

来源：6-3 Harbor高可用部署（下）

凛5

2021-08-24

通过【containerd如何配置insecure-registries】这个提问已经找到了答案

当部署cronjob的时候，拉去镜像失败，harbor使用的是http协议，这里有个请求总是使用https。已经将harbor.yl.com这个域名添加到daemon.json文件中并重启了。谢谢
直接使用docker pull harbor.yl.com/kubernates/conjob:v1可以拉去成功

Warning Failed 5m54s (x4 over 7m15s) kubelet Failed to pull image “harbor.yl.com/kubernates/cronjob:v1”: rpc error: code = Unknown desc = failed to pull and unpack image “harbor.yl.com/kubernates/cronjob:v1”: failed to resolve reference “harbor.yl.com/kubernates/cronjob:v1”: failed to do request: Head “https://harbor.yl.com/v2/kubernates/cronjob/manifests/v1”: dial tcp 192.168.150.143:443: connect: connection refused

写回答

2回答

nick1999

2021-11-17

containerd 还是报错：
/etc/containerd/config.toml

      [plugins."io.containerd.grpc.v1.cri".registry.configs]
        [plugins."io.containerd.grpc.v1.cri".registry.configs."my.private.com".tls]
          insecure_skip_verify = true
        [plugins."io.containerd.grpc.v1.cri".registry.configs."my.private.com".auth]
          username = "admin"
          password = "admin"
      [plugins."io.containerd.grpc.v1.cri".registry.headers]

      [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."my.private.com"]
          endpoint = ["http://my.private.com:80"]

root@control:~# containerd --version
containerd github.com/containerd/containerd v1.5.7 xxxxxx

root@control:~# crictl pull my.private.com/base/centos_jre8:v1
FATA[0001] pulling image: rpc error: code = Unknown desc = failed to pull and unpack 
image "my.private.com/base/centos_jre8:v1": failed to resolve reference 
"my.private.com/base/centos_jre8:v1": pulling from host my.private.com:80
 failed with status code [manifests v1]: 401 Unauthorized
 
 
root@control:~# ctr --debug image pull -u admin:admin my.private.com/base/centos_jre8:v1
DEBU[0000] fetching                                      image="my.private.com/base/centos_jre8:v1"
DEBU[0000] resolving                                     host=my.private.com
DEBU[0000] do request                                    host=my.private.com request.header.accept="application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.manifest.v1+json, application/vnd.oci.image.index.v1+json, */*" request.header.user-agent=containerd/v1.5.7 request.method=HEAD url="https://my.private.com/v2/base/centos_jre8/manifests/v1"
INFO[0000] trying next host                              error="failed to do request: Head \"https://my.private.com/v2/base/centos_jre8/manifests/v1\": dial tcp 172.31.3.122:443: connect: connection refused"host=my.private.com
ctr: failed to resolve reference "my.private.com/base/centos_jre8:v1": failed to do request: Head "https://my.private.com/v2/base/centos_jre8/manifests/v1": dial tcp 172.31.3.122:443: connect: connection refused