Unable to access "projects.registry.vmware.com" in Tanzu Kubernetes Grid Cluster.

Products

• Tanzu Kubernetes Grid
• VMware Tanzu Kubernetes Grid Plus

Issue/Introduction

Image pull failed when accessing "projects.registry.vmware.com" 

Environment

VMware Tanzu Kubernetes Grid. 

Resolution

Kindly update the firewall rules and whitelist the below mentioned domains to allow access to the public container images  "projects.registry.vmware.com" from internet restricted environment.

projects.registry.vmware.com
projects.packages.broadcom.com
jfrog-prod-usw2-shared-oregon-main.s3.amazonaws.com

 

 

 

Additional Information

If you would like to whitelist only IP subnet please refer below mentioned process :

Artifactory Url : What URLs/IP’s I should whitelist when working with Direct Cloud Storage Download in JFrog SaaS

https://docs.aws.amazon.com/vpc/latest/userguide/aws-ip-ranges.html

Reference example : 

curl -O https://ip-ranges.amazonaws.com/ip-ranges.json
jq -c '.prefixes[]|select(.region=="us-west-2" and .service=="S3")' ip-ranges.json

# projects.registry.vmware.com & "projects.packages.broadcom.com"

curl -O https://ip-ranges.amazonaws.com/ip-ranges.json
jq -c '.prefixes[]|select(.region=="us-west-2" and .service=="EC2")' ip-ranges.json