错误讯息

Failed to pull image "192.168.1.12:30004/dev/platform:latest": rpc error: code = Unknown desc = pinging container registry 192.168.1.12:30004: Get "https://192.168.1.12:30004/v2/": http: server gave HTTP response to HTTPS c lient

环境:kubernetes版本:1.22
私仓:harbor
底层作业系统:rhel 8.5

解决思路

1.查到网路资料偏向docker insecure-registries设定，因此在朝向是否安装docker在本机端，但安装docker会影响到crio设定或者版本，因此选择安装podman
2.安装完podman并设定podman的insecure-registries，(docker与podman安装insecure-registries不一样)
3.安装完后测试pull imagesg是否正常
4.再次部属前后端，依然发生问题Unknown key "keyPaths"问题，使用修正补丁
5.重新布署可以正常了

1.安装podman

sudo yum module enable -y container-tools:rhel8sudo yum module install -y container-tools:rhel8

https://podman.io/getting-started/installation

2.安装完podman并设定podman的insecure-registries

sudo vim /etc/containers/registries.conf[[registry]]insecure = truelocation = "192.168.1.12:30004"$ sudo systemctl restart podman$ podman info

https://williamlieurance.com/insecure-podman-registry/

3.安装完后测试pull imagesg是否正常

pod设定完后再次重启部属，发现新问题错误无如下

Failed to pull image "192.168.1.12:30004/dev/platform:latest": rpc error: code = Unknown desc = invalid policy in "/etc/containers/policy.json": Unknown key "keyPaths"

4.修正发生问题Unknown key "keyPaths"问题

$ sudo podman image trust set -f /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release registry.access.redhat.com$ sudo podman image trust set -f /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release registry.redhat.io$ cat <<EOF > /etc/containers/registries.d/registry.access.redhat.com.yamldocker:     registry.access.redhat.com:         sigstore: https://access.redhat.com/webassets/docker/content/sigstoreEOF> cat <<EOF > /etc/containers/registries.d/registry.redhat.io.yamldocker:     registry.redhat.io:         sigstore: https://registry.redhat.io/containers/sigstoreEOF

https://github.com/cri-o/cri-o/issues/6197

5.重新布署可以正常了