microk8s 中的私有 docker.io 注册表

如何解决microk8s 中的私有 docker.io 注册表

我遇到了 microk8s 达到 docker.io 注册表的速率限制的问题

ctr: Failed to copy: httpReaderSeeker: Failed open: unexpected status code https://registry-1.docker.io/v2/calico/kube-controllers/manifests/sha256:bf58609ff39089533b80ff2a10fffd1302346f153c66e24d0572fb8b198daea1: 429 Too Many Requests - Server message: toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit

我想为 docker.io 配置私有仓库授权。我已关注following instruction

看起来它不适用于 docker.io 注册表

我修改了配置文件

/var/snap/microk8s/current/args/containerd-template.toml

以下内容

  [plugins."io.containerd.grpc.v1.cri".registry]
    # 'plugins."io.containerd.grpc.v1.cri".registry.mirrors' are namespace to mirror mapping for all namespaces.
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
        endpoint = ["https://registry-1.docker.io",]
    [plugins."io.containerd.grpc.v1.cri".registry.configs]
      [plugins."io.containerd.grpc.v1.cri".registry.configs."docker.io".auth]
        username = ""
        password = ""            
        auth = ""
        email = ""

但是看起来这不适用于 docker.io 注册表

我知道 this 解决方案，但是如果我没记错的话，这需要分别应用于每个命名空间。我正在为整个 kubernetes 集群寻找一次性解决方案。

有没有这样的解决方案，或者kubernetes secret是唯一的出路？