TKG clusters are unable to pull the images (x509: certificate signed by unknown authority)

Products

• VMware Telco Cloud Automation

Issue/Introduction

Getting error of ImagePullBackOff when harbor is being involved

  Warning  Failed          48m (x6 over 49m)      kubelet            Error: ImagePullBackOff
  Normal   Pulling         48m (x4 over 49m)      kubelet            Pulling image "test.image-example.co.ie/test_node/netshoot"

  Warning  Failed          48m (x4 over 49m)      kubelet            Failed to pull image "test.image-example.co.ie/test_node/netshoot": rpc error: code = Unknown desc = failed to pull and unpack image "test.image-example.co.ie/test_node/netshoot:latest": failed to resolve reference "test.image-example.co.ie/test_node/netshoot:latest": failed to do request: Head "<a href="https://test.image-example.co.ie/v2/test_node/netshoot/manifests/latest" :"="" title="https://test.image-example.co.ie/v2/test_node/netshoot/manifests/latest" style="box-sizing: border-box; scrollbar-width: thin; scrollbar-color: rgb(128, 210, 242) rgba(0, 0, 0, 0); word-break: break-word; position: relative !important; max-width: 100%; float: none !important; cursor: pointer; color: blue; text-decoration: underline;">https://test.image-example.co.ie/v2/test_node/netshoot/manifests/latest": x509: certificate signed by unknown authority

Environment

2.3

Cause

The harbor certs were renewed and the effect was not updated on the harbor addon

Resolution

To fix this issue make sure that Harbor is validated from partner system and Update the harbor addon and save the changes to provision it again to take effect.

Additional Information

The capability of specifying a certificate for harbor is added from TCA 3.1 onwards
If the harbor is registered in partner system, you can update the certificate in partner system (which updates harbor addon automatically)