如何从Kubernetes访问流浪

Question

我无法从我的私人码头工人中心仓库拉入上流浪运行我的本地Kubernetes设置专用码头工人枢纽库：

Container "hellonode" in pod "hellonode-n1hox" is waiting to start: image can't be pulled

Failed to pull image "username/hellonode": Error: image username/hellonode:latest not found

我已经通过流浪本地建立Kubernetes为描述here并创建了一个名为“dockerhub”的密码，其中kubectl创建秘密码头注册表dockerhub --docker-server = https://registry.hub.docker.com/ --docker-username = username --docker-password = ... --docker-email = ..作为图像提供的秘密。

我正在运行Kubernetes 1.2.0。

Answer 1

拉私人DockerHub托管从Kubernetes YAML图像：

运行这些命令：

DOCKER_REGISTRY_SERVER=https://index.docker.io/v1/ 
DOCKER_USER=Type your dockerhub username, same as when you `docker login` 
DOCKER_EMAIL=Type your dockerhub email, same as when you `docker login` 
DOCKER_PASSWORD=Type your dockerhub pw, same as when you `docker login` 

kubectl create secret docker-registry myregistrykey \ 
    --docker-server=$DOCKER_REGISTRY_SERVER \ 
    --docker-username=$DOCKER_USER \ 
    --docker-password=$DOCKER_PASSWORD \ 
    --docker-email=$DOCKER_EMAIL 

如果你对DockerHub用户名是DOCKER_USER，和您的私人回购协议被称为PRIVATE_REPO_NAME，和你想拉被标记为latest形象，创建此example.yaml文件：

apiVersion: v1 
kind: Pod 
metadata: 
    name: whatever 
spec: 
    containers: 
    - name: whatever 
     image: index.docker.io/DOCKER_USER/PRIVATE_REPO_NAME:latest 
     imagePullPolicy: Always 
     command: [ "echo", "SUCCESS" ] 
    imagePullSecrets: 
    - name: myregistrykey 

然后运行：

kubectl create -f example.yaml 

Answer 2

您可以按照how to configure nodes to authenticate to a private repository上的这些说明来配置kubelets以使Docker使用您的凭证，或者使用适用于pod的+ Phagun Baya解决方案和imagePullSecrets。

Answer 3

创建K8揭秘：

apiVersion: v1 
kind: Secret 
metadata: 
    name: repositorySecretKey 
data: 
    .dockerconfigjson: <base64 encoded docker auth config> 
type: kubernetes.io/dockerconfigjson 

然后在荚或RC配置提及的秘密。例如：

apiVersion: v1 
kind: Pod 
metadata: 
    name: test-pod 
spec: 
    containers: 
    - name: test-pod 
     image: quay.io/example/hello:1.1 
    imagePullSecrets: 
    - name: repositorySecretKey 

泊坞AUTH配置

{ 
    "https://quay.io": { 
    "email": ".", 
    "auth": "<base64 encoded auth token>" 
    } 
} 

或者

kubectl create secret docker-registry myregistrykey \ 
    --docker-server=DOCKER_REGISTRY_SERVER \ 
    --docker-username=DOCKER_USER \ 
    --docker-password=DOCKER_PASSWORD \ 
    --docker-email=DOCKER_EMAIL