Comments (4)
and final it cause me must use docker registry (registry:2), because harbor only support format2.
that sounds like a missing flexibility in harbor.
suggest
it does make sense to have the subpath consistency, but we cannot just move the images to the new location.
they likely have to be mirrored first, and if we decide to migrate users to the new location it will be a long process.
kubespray offline design
kubespray uses kubeadm and kubeadm's imageRepositry API field can technically accept a "repo/path" format and not only "repo". the problem will be with coredns images that will become "repo/path/coredns" which will not be valid unless you pushed coredns to that path instead of "repo/coredns". the kubeadm API has individual field for DNS that can be used to override the coredns image path, though.
from registry.k8s.io.
-
that sounds like a missing flexibility in harbor.
yes ,but i think harbor will not support push image without project name, it have a web ui to list and manage all projects, no project name will cause the ui list to become confused. -
it does make sense to have the subpath consistency
there just have 6 images use short format(Except coredns), and only k8s have this short format ,hope have a change in furture
root@node51:~# kubeadm config images list
I0117 09:21:50.999039 1387839 version.go:256] remote version is much newer: v1.26.0; falling back to: stable-1.25
registry.k8s.io/kube-apiserver:v1.25.5
registry.k8s.io/kube-controller-manager:v1.25.5
registry.k8s.io/kube-scheduler:v1.25.5
registry.k8s.io/kube-proxy:v1.25.5
registry.k8s.io/pause:3.8
registry.k8s.io/etcd:3.5.6-0
registry.k8s.io/coredns/coredns:v1.9.3
- kubespray uses kubeadm and kubeadm's imageRepositry
yes ,So this is the problem caused by inconsistency
from registry.k8s.io.
Those 6 images are available in two formats, however this is not up to registry.k8s.io, it's up to SIG release publishing them in the backing store.
Harbor should fix this, because it's fully in compliance with OCI distribution to just have host/image:tag
AFAIK, and Kubernetes has been doing this a long time. registry.k8s.io has the exact same image names as k8s.gcr.io, by design.
from registry.k8s.io.
FYI @kubernetes/sig-release @kubernetes/release-engineering
Kubernetes does not currently plan to remove the short format for consistency reasons, it has been around a long time.
You could file a bug with kubernetes/release and kubernetes/kubeadm to ask the respective projects to switch to only the nested format, but it will remain for all existing Kubernetes minor versions, and registry.k8s.io infrastructure will remain unchanged.
from registry.k8s.io.
Related Issues (20)
- Can't pull images from k8s.io in eu-west region over IPv6 HOT 10
- Not able to install K8s Cluster using kubeadm init command due to x509: certificate signed by unknown authority. HOT 3
- Unable to download docker images from registry.k8s.io due to x509: certificate is not valid for any names, but wanted to match prod-registry-k8s-io-ap-south-1.s3.dualstack.ap-south-1.amazonaws.com HOT 2
- Unable to download docker images from registry.k8s.io due to x509: certificate is not valid for any names, but wanted to match prod-registry-k8s-io-ap-south-1.s3.dualstack.ap-south-1.amazonaws.com HOT 1
- kubeadm init clone project to local compilation error HOT 11
- TLS handshake timeout pulling registry.k8s.io/kube-apiserver:v1.25.4 HOT 8
- Unable to pull registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.2 HOT 5
- Error response from daemon: Head "https://europe-west3-docker.pkg.dev/v2/k8s-artifacts-prod/images/sig-storage/csi-provisioner/manifests/v4.0.0": Forbidden HOT 3
- regional outage due to GCP us-west1 incident HOT 17
- Consider blocking some invalid requests at the edge HOT 1
- enable outlier detection HOT 5
- K8's registry block server IP HOT 4
- investigate switching to signed URLs HOT 4
- how to configure kubernetes registry to pull images i am getting image pull back issue HOT 1
- PULL REQUEST FAIL WHEN TRYING TO PULL IMAGE FROM registry.k8s.io HOT 4
- Disconnected Environments and "mirroring to a location you control" HOT 1
- Unable to access the registry when a specific User-Agent header is set HOT 13
- Handle missing referrers API HOT 4
- switch to aws-sdk-go-v2 HOT 3
- Please use subdomains for wildcard dns entries instead of path substitution HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from registry.k8s.io.