AKS无法拉取ACR镜像出现ImagePullBackOff问题求助
各位好,我现在碰到了AKS拉取ACR镜像的棘手问题,想请大家帮忙排查下:
我正在使用Azure Kubernetes Service(AKS)从Azure Container Registry(ACR)部署Docker镜像,结果部署后直接出现了镜像拉取失败的错误,具体报错信息如下:
Failed to pull image "<reg_name>.azurecr.io/service:latest": [rpc error: code = NotFound desc = failed to pull and unpack image "<reg_name>.azurecr.io/service:latest": failed to resolve reference "<reg_name>.azurecr.io/service:latest": <reg_name>.azurecr.io/service:latest: not found, rpc error: code = Unknown desc = failed to pull and unpack image "<reg_name>.azurecr.io/service:latest": failed to resolve reference "<reg_name>.azurecr.io/service:latest": failed to authorize: failed to fetch anonymous token: unexpected status: 401 Unauthorized]
我已经按流程创建了服务主体(Service Principal),拿到了对应的主体名称和密码,并用这些信息创建了Kubernetes的镜像拉取密钥。之后在我的deployment.yml配置文件里,也添加了imagePullSecrets字段指向刚创建的密钥。但重新部署后,执行kubectl get pods还是看到同样的失败状态:
service-deployment-cbf49bcd9-vs2jz 0/1 ImagePullBackOff 0 27m
更奇怪的是,我用这个服务主体的凭证通过docker login命令登录ACR是完全正常的,但在AKS里就是拉取不到镜像。有没有朋友遇到过类似的情况,或者能给我一些排查方向?谢谢大家!
备注:内容来源于stack exchange,提问作者testtest

