如何将根CA添加到minikube? [英] How I can add root CA to minikube?

问题描述

我的公司使用它自己的根CA，并且在我尝试提取图像时使用.即使从私人注册表中，我也会收到错误消息:

My company uses it's own root CA and when I'm trying to pull images. Even from a private registry I'm getting error:

1h 3m 22 {kubelet minikube}警告FailedSync错误同步 pod，跳过:使用ErrImagePull无法为"POD"创建"StartContainer": 对于gcr.io/google_containers/pause-amd64:3.0，图像拉取失败，此 可能是因为此请求没有凭据.

1h 3m 22 {kubelet minikube} Warning FailedSync Error syncing pod, skipping: failed to "StartContainer" for "POD" with ErrImagePull: "image pull failed for gcr.io/google_containers/pause-amd64:3.0, this may be because there are no credentials on this request.

详细信息: (守护程序的错误响应:获取 https://gcr.io/v1/_ping :x509: 由未知权限签署的证书) 1h 10s 387 {kubelet minikube}警告FailedSync同步pod时出错，正在跳过:未能将"POD"的"StartContainer"与 ImagePullBackOff:后退拉动图像 \"gcr.io/google_containers/pause-amd64:3.0 \""

details: (Error response from daemon: Get https://gcr.io/v1/_ping: x509: certificate signed by unknown authority)" 1h 10s 387 {kubelet minikube} Warning FailedSync Error syncing pod, skipping: failed to "StartContainer" for "POD" with ImagePullBackOff: "Back-off pulling image \"gcr.io/google_containers/pause-amd64:3.0\""

如何将根CA安装到minkube或避免出现此消息，即仅使用私有注册表，并且不要从gcr.io中提取任何内容?

How I can install root CA to minkube or avoid this message i.e. Use only private registry, and don't pull anything from gcr.io ?

推荐答案

到目前为止，我发现的唯一解决方案是在minikube中添加--insecure-registry gcr.io选项.

The only solution I've found so far is adding --insecure-registry gcr.io option to the minikube.

这篇关于如何将根CA添加到minikube?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！