rpc error: code = Unknown desc = failed to pull and unpack image : 403 Forbidden

      

      

      

    
    

      <bash />
    
Events:
  Type     Reason     Age                From               Message
  ----     ------     ----               ----               -------
  Normal   Scheduled  66s                default-scheduler  Successfully assigned prototype/eth-at-prototype-v1-28199520-bh5kz to k3s-master
  Normal   Pulling    22s (x3 over 65s)  kubelet            Pulling image "501587125031.dkr.ecr.ap-northeast-2.amazonaws.com/eth-at-prototype:v.1.4.1"
  Warning  Failed     22s (x3 over 65s)  kubelet            Failed to pull image "501587125031.dkr.ecr.ap-northeast-2.amazonaws.com/eth-at-prototype:v.1.4.1": rpc error: code = Unknown desc = failed to pull and unpack image "501587125031.dkr.ecr.ap-northeast-2.amazonaws.com/eth-at-prototype:v.1.4.1": failed to resolve reference "501587125031.dkr.ecr.ap-northeast-2.amazonaws.com/eth-at-prototype:v.1.4.1": unexpected status from HEAD request to https://501587125031.dkr.ecr.ap-northeast-2.amazonaws.com/v2/eth-at-prototype/manifests/v.1.4.1: 403 Forbidden
  Warning  Failed     22s (x3 over 65s)  kubelet            Error: ErrImagePull
  Normal   BackOff    10s (x3 over 65s)  kubelet            Back-off pulling image "501587125031.dkr.ecr.ap-northeast-2.amazonaws.com/eth-at-prototype:v.1.4.1"
  Warning  Failed     10s (x3 over 65s)  kubelet            Error: ImagePullBackOff

private ECR 에서 pull 해오던 이미지가 가져와지지 않음

계속 버전만 바꿔가면서 pull해오던거라 버전을 잘못입력했나 싶었는데 아님

400 번대 오류니까 자격증명을 다시만들어보니까 됬음

 

      

      

      

    
    

      <bash />
    
# secret 재생성
k create secret docker-registry regcred \
	--docker-server=501587125031.dkr.ecr.ap-northeast-2.amazonaws.com \
    --docker-username=AWS \
    --docker-password=$(aws ecr get-login-password) \
    --namespace=prototype
    
 # secret 을 사용하는 manifest
 ...
  imagePullSecrets:
          - name: regcred

      

      

      

    
    

      <bash />
    
$ k get all -n prototype
NAME                                     READY   STATUS    RESTARTS   AGE
pod/eth-at-prototype-v1-28199520-gsgnn   1/1     Running   0          38s

NAME                                SCHEDULE    SUSPEND   ACTIVE   LAST SCHEDULE   AGE
cronjob.batch/eth-at-prototype-v1   0 0 * * *   False     1        7h8m            32d

NAME                                     COMPLETIONS   DURATION   AGE
job.batch/eth-at-prototype-v1-28198080   0/1           31h        31h
job.batch/eth-at-prototype-v1-28199520   0/1           7h8m       7h8m