Skip to content

Can not pull container from private registry with kubernetes executor

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Summary

(Summarize the bug encountered concisely)

Steps to reproduce

Install gitlab omnibus on dedicated server with Docker container. Enable gitlab container registry. Push container into registry. Enable ci with kubernetes executor Create secret with kubectl create secret docker-registry regsecret --docker-server= --docker-username= --docker-password= --docker-email= Add regsecret with image_pull_secrets into gitlab configmap. Try to pull image from registry with gitlab Ci

What is the current bug behavior?

(What actually happens)

I can not pull private image from registry The message issue is : ERROR: Job failed: image pull failed: Back-off pulling image "hostname:port/group/project"

What is the expected correct behavior?

Pull image from registry by ci (What you should see instead) ERROR: Job failed: image pull failed: Back-off pulling image "hostname:port/group/project"

Results of GitLab environment info

Expand for output related to GitLab environment info 
(For installations with omnibus-gitlab package run and paste the output of:
sudo gitlab-rake gitlab:env:info)


(For installations from source run and paste the output of:
sudo -u git -H bundle exec rake gitlab:env:info RAILS_ENV=production)

Results of GitLab application Check

Expand for output related to the GitLab application check 
(For installations with omnibus-gitlab package run and paste the output of:
sudo gitlab-rake gitlab:check SANITIZE=true)

Possible Workarounds

Ordered by oldest to newest:

  1. #20467 (comment 215095464) add secret and change imagePullSecrets settings
  2. #20467 (comment 215095510) create deploy token
  3. #20467 (comment 215095525) create secret and modify auths
  4. #20467 (comment 215095526) add a secret that can read the private GCR repositories
  5. kubernetes-gitlab-demo#24 (comment 88894586) changing affinity settings
  6. gitlab-org/charts/gitlab#1249 (comment 154554650) overwriting externalTrafficPolicy to be cluster
Edited by 🤖 GitLab Bot 🤖