Slackbot
10/12/2022, 9:33 AMXipeng Guan
10/12/2022, 9:46 AM127.0.0.1:5000/
, 127.0.0.1:5000
is a proxy by daemonset docker-private-registry-proxy
, because docker registry needs to be accessed via https, and private docker registry does not have public tls certificates, so it must require self-signed t-certificates on all nodes, and to avoid such a complicated configuration, a proxy on port 5000 is started on each node, because docker has done special processing for the registry address 127.0.0.1:5000, 127.0. 0.1:5000 does not force access via https, as explained in the documentation:
https://docs.bentoml.org/projects/yatai/en/latest/installation/yatai_deployment.html#prepare-docker-registryBenjamin Tan
10/12/2022, 9:48 AMBenjamin Tan
10/12/2022, 9:48 AMBenjamin Tan
10/12/2022, 9:48 AMBack-off pulling image "127.0.0.1:5000/bentos:yatai.default.ktp_ocr.k5q3gcsj3wba3c4m"
Benjamin Tan
10/12/2022, 9:49 AMBenjamin Tan
10/12/2022, 9:49 AMXipeng Guan
10/12/2022, 9:50 AMkubectl -n yatai-deployment get pod -l app=docker-private-registry-proxy -o wide
Benjamin Tan
10/12/2022, 9:51 AMBenjamin Tan
10/12/2022, 9:51 AMBenjamin Tan
10/12/2022, 9:51 AM