拉新网 - 挖掘漏洞 - 线报平台

小天天

Moderator

注册时间： 2019-09-29

帖子： 891

crictl 401 Unauthorized

问题

[root@k8s-master3 ~]# crictl  pull harbor.axxx.org.cn/k8s/nginx-ingress-controller:1.7.0
E0603 20:24:13.438864    5917 remote_image.go:238] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"harbor.axxx.org.cn/k8s/nginx-ingress-controller:1.7.0\": failed to resolve reference \"harbor.axxx.org.cn/k8s/nginx-ingress-controller:1.7.0\": pulling from host harbor.axxx.org.cn failed with status code [manifests 1.7.0]: 401 Unauthorized" image="harbor.axxx.org.cn/k8s/nginx-ingress-controller:1.7.0"
FATA[0000] pulling image: rpc error: code = Unknown desc = failed to pull and unpack image "harbor.axxx.org.cn/k8s/nginx-ingress-controller:1.7.0": failed to resolve reference "harbor.axxx.org.cn/k8s/nginx-ingress-controller:1.7.0": pulling from host harbor.axxx.org.cn failed with status code [manifests 1.7.0]: 401 Unauthorized

需要/etc/containerd/config.toml配置账密：

[plugins]
  [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc]
    runtime_type = "io.containerd.runc.v2"
    [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options]
      SystemdCgroup = true
  [plugins."io.containerd.grpc.v1.cri"]
    sandbox_image = "harbor.axxx.org.cn/k8s/pause:3.8"
    [plugins."io.containerd.grpc.v1.cri".cni]
      bin_dir = "/opt/cni/bin"
      conf_dir = "/etc/cni/net.d"
      max_conf_num = 1
      conf_template = ""
    [plugins."io.containerd.grpc.v1.cri".registry]
      [plugins."io.containerd.grpc.v1.cri".registry.auths]

      [plugins."io.containerd.grpc.v1.cri".registry.configs]
        [plugins."io.containerd.grpc.v1.cri".registry.configs."harbor.axxx.org.cn".tls]
          insecure_skip_verify = true
        [plugins."io.containerd.grpc.v1.cri".registry.configs."harbor.axxx.org.cn".auth]
          username = "admin"
          password = "Harbor12345"

      [plugins."io.containerd.grpc.v1.cri".registry.headers]
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
        [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
          endpoint = ["https://registry-1.docker.io"]