背景: k8s集群扩容节点,扩容完成后发现节点daemonset启动失败,报错ImagePullBackOff,镜像拉取失败
排查:
- 登录扩容主机尝试手动docker login私有仓库地址
docker login --username=xxxx hub.xxx.com.cn # 登录仓库
> Error response from daemon: Get "https://hub.xxx.com.cn/v2/": x509: certificate relies on legacy Common Name field, use SANs or temporarily enable Common Name matching with GODEBUG=x509ignoreCN=0
> # 登录仓库报错如上
-
github搜索后发现如