Hi I ve got a simple public image in dockerhub I have no pro rancher-users #k3s

Title

handsome-toddler-59547

06/11/2022, 2:40 PM

Hi. I've got a simple public image in dockerhub. I have no problem pushing or pulling this image using docker. I'm trying to use it in my k3s cluster. I see the following error:

Events:
  Type     Reason     Age   From               Message
  ----     ------     ----  ----               -------
  Normal   Scheduled  7s    default-scheduler  Successfully assigned default/test-59697b49db-tgmw2 to worker1
  Normal   Pulling    105s  kubelet            Pulling image "dsargrad/test:0.1.0"
  Warning  Failed     103s  kubelet            Failed to pull image "dsargrad/test:0.1.0": rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/dsargrad/test:0.1.0|docker.io/dsargrad/test:0.1.0>": failed to copy: httpReadSeeker: failed open: failed to do request: Get "<https://production.cloudflare.docker.com/registry-v2/docker/registry/v2/blobs/sha256/c8/c852233570204549536abaa9a881803c38ef6192a370d7791bd480e7102d7560/data?verify=1654961268-HeAOL1x8aj7nmL5RUXQv1ApRkvY%3D>": x509: certificate has expired or is not yet valid: current time 2022-06-10T13:32:23-04:00 is before 2022-06-11T00:00:00Z
  Warning  Failed     103s  kubelet            Error: ErrImagePull
  Normal   BackOff    102s  kubelet            Back-off pulling image "dsargrad/test:0.1.0"
  Warning  Failed     102s  kubelet            Error: ImagePullBackOff

My deployment:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: test
spec:
  selector:
    matchLabels:
      app: test
  replicas: 1
  template:
    metadata:
      labels:
        app: test
    spec:
      containers:
      - name: test
        image: dsargrad/test:0.1.0
        ports:
        - containerPort: 3000

I find the X509 certificate expired or is not yet valid interesting.. there are some hits online about that.

any suggestion would be much appreciated

ok.. never mind.. it eventually worked. Apparently some DNS thing or something like that needed to be configured behind the scenes. this was a new image that I just pushed to Docker.

Events:
  Type     Reason          Age                 From               Message
  ----     ------          ----                ----               -------
  Normal   Scheduled       21h                 default-scheduler  Successfully assigned default/test-59697b49db-tgmw2 to worker1
  Warning  Failed          21h                 kubelet            Failed to pull image "dsargrad/test:0.1.0": rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/dsargrad/test:0.1.0|docker.io/dsargrad/test:0.1.0>": failed to copy: httpReadSeeker: failed open: failed to do request: Get "<https://production.cloudflare.docker.com/registry-v2/docker/registry/v2/blobs/sha256/c8/c852233570204549536abaa9a881803c38ef6192a370d7791bd480e7102d7560/data?verify=1654961268-HeAOL1x8aj7nmL5RUXQv1ApRkvY%3D>": x509: certificate has expired or is not yet valid: current time 2022-06-10T13:32:23-04:00 is before 2022-06-11T00:00:00Z
  Warning  Failed          21h                 kubelet            Failed to pull image "dsargrad/test:0.1.0": rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/dsargrad/test:0.1.0|docker.io/dsargrad/test:0.1.0>": failed to copy: httpReadSeeker: failed open: failed to do request: Get "<https://production.cloudflare.docker.com/registry-v2/docker/registry/v2/blobs/sha256/c8/c852233570204549536abaa9a881803c38ef6192a370d7791bd480e7102d7560/data?verify=1654961284-2Ad2Hv%2F%2F8Dq1ErQSjr2EjmuEL8I%3D>": x509: certificate has expired or is not yet valid: current time 2022-06-10T13:32:40-04:00 is before 2022-06-11T00:00:00Z
  Warning  Failed          21h                 kubelet            Failed to pull image "dsargrad/test:0.1.0": rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/dsargrad/test:0.1.0|docker.io/dsargrad/test:0.1.0>": failed to copy: httpReadSeeker: failed open: failed to do request: Get "<https://production.cloudflare.docker.com/registry-v2/docker/registry/v2/blobs/sha256/c8/c852233570204549536abaa9a881803c38ef6192a370d7791bd480e7102d7560/data?verify=1654961314-Qg0b9I0M9UQLb%2FGB2s%2BepjEdnLw%3D>": x509: certificate has expired or is not yet valid: current time 2022-06-10T13:33:13-04:00 is before 2022-06-11T00:00:00Z
  Normal   Pulling         21h (x4 over 21h)   kubelet            Pulling image "dsargrad/test:0.1.0"
  Warning  Failed          21h                 kubelet            Failed to pull image "dsargrad/test:0.1.0": rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/dsargrad/test:0.1.0|docker.io/dsargrad/test:0.1.0>": failed to copy: httpReadSeeker: failed open: failed to do request: Get "<https://production.cloudflare.docker.com/registry-v2/docker/registry/v2/blobs/sha256/c8/c852233570204549536abaa9a881803c38ef6192a370d7791bd480e7102d7560/data?verify=1654961362-pB5S9fs8xo%2F4l5vwSraUvMjIXQk%3D>": x509: certificate has expired or is not yet valid: current time 2022-06-10T13:34:05-04:00 is before 2022-06-11T00:00:00Z
  Warning  Failed          21h (x4 over 21h)   kubelet            Error: ErrImagePull
  Warning  Failed          21h (x6 over 21h)   kubelet            Error: ImagePullBackOff
  Normal   BackOff         21h (x42 over 21h)  kubelet            Back-off pulling image "dsargrad/test:0.1.0"
  Normal   SandboxChanged  5m51s               kubelet            Pod sandbox changed, it will be killed and re-created.
  Normal   Pulling         5m51s               kubelet            Pulling image "dsargrad/test:0.1.0"
  Normal   Pulled          4m13s               kubelet            Successfully pulled image "dsargrad/test:0.1.0" in 1m37.393231566s
  Normal   Created         4m13s               kubelet            Created container test
  Normal   Started         4m13s               kubelet            Started container test

creamy-pencil-82913

06/11/2022, 8:09 PM

Are you sure the time is correct on your host? The current time in that log message appears to indicate that the host thinks it is yesterday, which is before the cloudflare certificate on the docker.io content distribution network was issued.

handsome-toddler-59547

06/16/2022, 9:21 PM

Hmm.. Interesting point @creamy-pencil-82913. I'm pretty sure my clock is ok.. but i didnt even think of that. Eventually things worked fine. I had just setup my github account. So I think the delay related to that.

18 Views

#k3s Join Slack