containerd里无法拉取镜像无法从私建的harbor上拉取报错
FATA[0000] pulling image: rpc error: code = Unknown desc = failed to pull and unpack image
x509: cannot validate certificate for 192.168.0.56 because it doesn't contain any IP SANs
环境: k8s1.25
containerd1.6.31
docker26.0.1
centos 7.9
原因是containerd无法登录到私建的ssl上
解决方法:
/etc/containerd/config.toml 里添加harbor的登录密码机登录路径和跳过ssl登录
若是配置之后还是一直报x509: cannot validate certificate for 192.168.0.56 because it doesn't contain any IP SANs 错误,那就要看下
config_path = "/etc/containerd/certs.d" 是不是被强制设置里证书目录了,就得去掉为空才能跳过
以上知识在私建的harbor公网发放的加密证书情况下, 外网能发放到真正加密证书的课忽悠该问题