ImagePullBackOff

I’m trying to deploy an application but it’s giving error ImagePullBackOff

Worker can’t pull image from Harbor - Container Image Registry.

The image in the harbor is set to public, the option to prevent execution of vulnerable images is set to none.

Events:
Type Reason Age From Message


Normal Scheduled 4s default-scheduler Successfully assigned default/doc-admin-7848dff49d-mbf5r to worker04
Normal Pulling 3s kubelet Pulling image “harbor.tcemt.tc.br/dev/doc-admin:latest”
Warning Failed 3s kubelet Failed to pull image “harbor.tcemt.tc.br/dev/doc-admin:latest”: rpc error: code = Unknown desc = Error response from daemon: unknown: The image is not signed in Notary.
Warning Failed 3s kubelet Error: ErrImagePull
Normal BackOff 2s kubelet Back-off pulling image “harbor.tcemt.tc.br/dev/doc-admin:latest”
Warning Failed 2s kubelet Error: ImagePullBackOff

1- I have no network problem, I can ping and do name resolution through worker04.
2- I have no problem of ssl communication between the server.

Welcome to Ubuntu 20.04.3 LTS (GNU/Linux 5.4.0-99-generic x86_

Last login: Mon Feb 14 08:14:30 2022 from 10.69.39.9

ubuntu@worker04:~$ nslookup harbor.tcemt.tc.br
Server: 127.0.0.53
Address: 127.0.0.53#53

Non-authoritative answer:
Name: harbor.tcemt.tc.br
Address: 172.16.0.7

ubuntu@worker04:~$ ping harbor.tcemt.tc.br
PING harbor.tcemt.tc.br (172.16.0.7) 56(84) bytes of data.
64 bytes de harbor.tcemt.tc.br (172.16.0.7): icmp_seq=1 ttl=64 tempo=1.57 ms
64 bytes de harbor.tcemt.tc.br (172.16.0.7): icmp_seq=2 ttl=64 tempo=0.741 ms
64 bytes de harbor.tcemt.tc.br (172.16.0.7): icmp_seq=3 ttl=64 tempo=0.711 ms
^C
— harbor.tcemt.tc.br estatísticas de ping —
3 pacotes transmitidos, 3 recebidos, 0% perda de pacote, tempo 2021ms
rtt min/avg/max/mdev = 0.711/1.007/1.569/0.397 ms

ubuntu@worker04:~$ docker login harbor.tcemt.tc.br
Authenticating with existing credentials…
WARNING! Your password will be stored unencrypted in /home/ubuntu/.docker/config.json.
Configure a credential helper to remove this warning. See

Login Succeeded

ubuntu@worker04:~$ curl https://harbor.tcemt.tc.br
<!doctype html>

Harbor
Loading...
ubuntu@worker04:~$

How can I debug “ImagePullBackOff”?

Or how do I solve this problem.

Cluster information:

Bare Metal
Rancherv 2.6.3
Kubernetes version: v1.21.9
Host OS: Ubuntu 20.04.03
CNI and version:
CRI and version:

You can format your yaml by highlighting it and pressing Ctrl-Shift-C, it will make your output easier to read.

hey, @efcunha
It’s not an issue with k8s.
Check this issue, it seems issue with harbor config.

1 Like