Helm 在从公共 ECR 存储库中提取图像时抛出错误

问题描述 投票:0回答:1

helm pull oci://public.ecr.aws/karpenter/karpenter --version v0.33.1 --debug v 10

DEBU[0000] resolving                                     host=public.ecr.aws DEBU[0000] do request                                    host=public.ecr.aws request.header.accept="application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.manifest.v1+json, application/vnd.oci.image.index.v1+json, */*" request.header.user-agent=Helm/3.14.0 request.method=HEAD url="https://public.ecr.aws/v2/karpenter/karpenter/manifests/v0.33.1" DEBU[0000] fetch response received                       host=public.ecr.aws response.header.content-length=58 response.header.content-type="application/json; charset=utf-8" response.header.date="Wed, 31 Jan 2024 13:02:31 GMT" response.header.docker-distribution-api-version=registry/2.0 response.header.www-authenticate="Bearer realm=\"https://public.ecr.aws/token/\",service=\"public.ecr.aws\",scope=\"aws\"" response.status="401 Unauthorized" url="https://public.ecr.aws/v2/karpenter/karpenter/manifests/v0.33.1" DEBU[0000] Unauthorized                                  header="Bearer realm=\"https://public.ecr.aws/token/\",service=\"public.ecr.aws\",scope=\"aws\"" host=public.ecr.aws DEBU[0000] do request                                    host=public.ecr.aws request.header.accept="application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.manifest.v1+json, application/vnd.oci.image.index.v1+json, */*" request.header.user-agent=Helm/3.14.0 request.method=HEAD url="https://public.ecr.aws/v2/karpenter/karpenter/manifests/v0.33.1" DEBU[0000] fetch response received                       host=public.ecr.aws response.header.content-length=717 response.header.content-type=application/vnd.oci.image.manifest.v1+json response.header.date="Wed, 31 Jan 2024 13:02:31 GMT" response.header.docker-content-digest="sha256:72a1d3f31167169dc19691cd64f539b038368fe64ac827dd084ed287ac8a24f3" response.header.docker-distribution-api-version=registry/2.0 response.status="200 OK" url="https://public.ecr.aws/v2/karpenter/karpenter/manifests/v0.33.1" DEBU[0000] resolved                                      desc.digest="sha256:72a1d3f31167169dc19691cd64f539b038368fe64ac827dd084ed287ac8a24f3" host=public.ecr.aws DEBU[0000] do request                                    digest="sha256:72a1d3f31167169dc19691cd64f539b038368fe64ac827dd084ed287ac8a24f3" request.header.accept="application/vnd.oci.image.manifest.v1+json, */*" request.header.user-agent=Helm/3.14.0 request.method=GET url="https://public.ecr.aws/v2/karpenter/karpenter/manifests/sha256:72a1d3f31167169dc19691cd64f539b038368fe64ac827dd084ed287ac8a24f3" DEBU[0000] fetch response received                       digest="sha256:72a1d3f31167169dc19691cd64f539b038368fe64ac827dd084ed287ac8a24f3" response.header.content-length=717 response.header.content-type=application/vnd.oci.image.manifest.v1+json response.header.date="Wed, 31 Jan 2024 13:02:31 GMT" response.header.docker-distribution-api-version=registry/2.0 response.status="200 OK" url="https://public.ecr.aws/v2/karpenter/karpenter/manifests/sha256:72a1d3f31167169dc19691cd64f539b038368fe64ac827dd084ed287ac8a24f3" DEBU[0000] do request                                    digest="sha256:1145bfda95a014eebc775ac8557711de719e428b00131e2d5fa70d001229a3cb" request.header.accept="application/vnd.cncf.helm.chart.content.v1.tar+gzip, */*" request.header.user-agent=Helm/3.14.0 request.method=GET url="https://public.ecr.aws/v2/karpenter/karpenter/blobs/sha256:1145bfda95a014eebc775ac8557711de719e428b00131e2d5fa70d001229a3cb" DEBU[0000] do request                                    digest="sha256:3363ded2b4ae75c52cedeaf922cc917c2577d041025fa7bcee19f805521d6fde" request.header.accept="application/vnd.cncf.helm.config.v1+json, */*" request.header.user-agent=Helm/3.14.0 request.method=GET url="https://public.ecr.aws/v2/karpenter/karpenter/blobs/sha256:3363ded2b4ae75c52cedeaf922cc917c2577d041025fa7bcee19f805521d6fde" Error: failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://d2glxqk2uabbnd.cloudfront.net/13a474-071440425669-f2c05e17-0e20-a997-dcf2-eb0520a718eb/1f3ea994-dc26-42de-8334-d644b2b7740b?Expires=1706709751&Signature=NbNdfFJzBONOnjN263DVcD-kIEFU2uARKWPJ0I9dGL4e4Q2ykPv1caRSjpxoPLdatIXcSXVFhcHBJP4hT6BtLtnf5g4P7h8U15o0iu8mr1BujAvnmMN6QxySm3uF9f16vmnvAj1K9QS0sc4a1fonnVGCEMvJesR3Pxws0MWU9k4ovB50V2dyeKxSP~JYcV88ibpOj~tBExEN1Jmoq68vf7~ak4DhJJ5OlnF75M9qRDyQlE5EZdcrHerP7ARd-XORehIeS8Qlx~zo5Xp1fOXQYc1WqgfSMbYD4FmiAriR7Mcg3htMTgmDQc~UA~TQrscpf60E7F82UQeB7KMJCNbqgQ__&Key-Pair-Id=KSPLJWGOARK62": write tcp [2601:5cc:c700:1b10:28c2:32d4:45e1:3cfd]:64601->[2600:9000:2512:3000:1d:242c:6e40:21]:443: write: socket is not connected helm.go:84: [debug] failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://d2glxqk2uabbnd.cloudfront.net/13a474-071440425669-f2c05e17-0e20-a997-dcf2-eb0520a718eb/1f3ea994-dc26-42de-8334-d644b2b7740b?Expires=1706709751&Signature=NbNdfFJzBONOnjN263DVcD-kIEFU2uARKWPJ0I9dGL4e4Q2ykPv1caRSjpxoPLdatIXcSXVFhcHBJP4hT6BtLtnf5g4P7h8U15o0iu8mr1BujAvnmMN6QxySm3uF9f16vmnvAj1K9QS0sc4a1fonnVGCEMvJesR3Pxws0MWU9k4ovB50V2dyeKxSP~JYcV88ibpOj~tBExEN1Jmoq68vf7~ak4DhJJ5OlnF75M9qRDyQlE5EZdcrHerP7ARd-XORehIeS8Qlx~zo5Xp1fOXQYc1WqgfSMbYD4FmiAriR7Mcg3htMTgmDQc~UA~TQrscpf60E7F82UQeB7KMJCNbqgQ__&Key-Pair-Id=KSPLJWGOARK62": write tcp [2601:5cc:c700:1b10:28c2:32d4:45e1:3cfd]:64601->[2600:9000:2512:3000:1d:242c:6e40:21]:443: write: socket is not connected

应该能够毫无错误地拉取镜像。

amazon-web-services kubernetes-helm
1个回答
0
投票

检查您是否有权访问

d2glxqk2uabbnd.cloudfront.net
。您只需将其插入浏览器或
curl https://d2glxqk2uabbnd.cloudfront.net
即可。它会给你一个身份验证错误,但这仍然会确认网络连接

如果没有网络连接,请检查防火墙设置或其他可能阻止网络连接的配置

d2glxqk2uabbnd.cloudfront.net
似乎用于 EKS Distro ECR 容器映像

© www.soinside.com 2019 - 2024. All rights reserved.