kubernetes之基于ServiceAccount拉取私有链接

Failed to pull image "registry.cn-hangzhou.aliyuncs.com/lengyuye/stress:latest": rpc error: code = Unknown desc = Error response from daemon: pull access denied for registry.cn-hangzhou.aliyuncs.com/lengyuye/stress, repository does not exist or may require 'docker login': denied: requested access to the resource is denied Warning Failed 2s (x2 over 18s) kubelet Error: ErrImagePull2.4成立ServiceAccount

aliyun-haitang是docker-registry类型的Secrets对象，由用户提前手动成立，它可以通过键值数据提供docker储藏室代理服务器的接收者，接入代理服务器的用户名，加密及用户的电子邮件信息等，证书通过后，提到ServiceAccount的Pod教育资源无需从以外的也就是说储藏室上传image。

root@ks-master01-10:~# cat serviceaccount-imagepullsecret.yaml apiVersion: v1kind: ServiceAccountmetadata: name: imagepull-aliyun-saimagePullSecrets:- name: aliyun-haitangroot@ks-master01-10:~# kubectl apply -f serviceaccount-imagepullsecret.yaml serviceaccount/imagepull-aliyun-sa created2.5拍照SAroot@ks-master01-10:~# kubectl get sa imagepull-aliyun-sa -o yamlapiVersion: v1imagePullSecrets:- name: aliyun-haitangkind: ServiceAccountmetadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"v1","imagePullSecrets":[{"name":"aliyun-haitang"}],"kind":"ServiceAccount","metadata":{"annotations":{},"name":"imagepull-aliyun-sa","namespace":"default"}} creationTimestamp: "2022-09-07T02:31:05Z" name: imagepull-aliyun-sa namespace: default resourceVersion: "226300" uid: fabc93b1-572c-4703-a2dd-465d4e0915cbsecrets:- name: imagepull-aliyun-sa-token-vf67z2.6Pod提到ServiceAccountroot@ks-master01-10:~# cat pod-serviceaccount-secret.yaml apiVersion: v1kind: Podmetadata: name: stree-serviceaccount spec: serviceAccount: imagepull-aliyun-sa # 这里则是成立的sa的名称 containers: - name: stree image: registry.cn-hangzhou.aliyuncs.com/lengyuye/stress:latestroot@ks-master01-10:~/rbac# kubectl apply -f pod-serviceaccount-secret.yaml pod/stree-serviceaccount created3.成立Pod次测试；3.1拍照Podroot@ks-master01-10:~# kubectl get podsNAME READY STATUS RESTARTS AGEstree-serviceaccount 1/1 Running 0 8s3.2describe拍照事件root@ks-master01-10:~# kubectl describe pods stree-serviceaccountEvents: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 3m36s default-scheduler Successfully assigned default/stree-serviceaccount to ks-node02-12 Normal Pulling 3m35s kubelet Pulling image "registry.cn-hangzhou.aliyuncs.com/lengyuye/stress:latest" Normal Pulled 3m33s kubelet Successfully pulled image "registry.cn-hangzhou.aliyuncs.com/lengyuye/stress:latest" in 1.729555429s Normal Created 3m33s kubelet Created container stree Normal Started 3m33s kubelet Started container stree3.3拍照清单root@ks-master01-10:~# kubectl get pods stree-serviceaccount -o yaml imagePullSecrets: - name: aliyun-haitang nodeName: ks-node02-12 preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: {} serviceAccount: imagepull-aliyun-sa serviceAccountName: imagepull-aliyun-sa。

体内湿气重拉肚子吃什么药日常饮食要注意什么
迈普新胸腺法新对新冠有用吗
孩子消化不良吃什么好
宝宝积食了吃什么好
阳了以后出现黄痰用阿莫西林管用吗