Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

failed to pull image when images already exists in local #2936

Closed
qiref opened this issue Sep 20, 2023 · 10 comments
Closed

failed to pull image when images already exists in local #2936

qiref opened this issue Sep 20, 2023 · 10 comments
Labels
kind/support Categorizes issue or PR as a support question.

Comments

@qiref
Copy link

qiref commented Sep 20, 2023

Versions

kubeadm version (use v1.28.2):

Environment:

  • Kubernetes version (use v1.28.2):
  • Cloud provider or hardware configuration:
  • OS (e.g. from /etc/os-release):
  • Kernel (e.g. Linux 10.0.0.9 5.4.119-1-tlinux4-0010.3 #1 SMP Thu Jan 5 17:31:23 CST 2023 x86_64 x86_64 x86_64 GNU/Linux):
  • Container runtime (CRI) (containerd):
  • Container networking plugin (CNI) (e.g. Calico, Cilium):
  • Others:

What happened?

[[email protected] ~]$  kubeadm config images list --kubernetes-version 1.28.2
registry.k8s.io/kube-apiserver:v1.28.2
registry.k8s.io/kube-controller-manager:v1.28.2
registry.k8s.io/kube-scheduler:v1.28.2
registry.k8s.io/kube-proxy:v1.28.2
registry.k8s.io/pause:3.9
registry.k8s.io/etcd:3.5.9-0
registry.k8s.io/coredns/coredns:v1.10.1

# load all docker images
docker load -i kube-apiserver.tar
docker tag cdcab12b2dd1 registry.k8s.io/kube-apiserver:v1.28.2
...

[[email protected] ~]$ docker images
REPOSITORY                                TAG       IMAGE ID       CREATED         SIZE
registry.k8s.io/kube-apiserver            v1.28.2   cdcab12b2dd1   6 days ago      126MB
registry.k8s.io/kube-proxy                v1.28.2   c120fed2beb8   6 days ago      73.1MB
registry.k8s.io/kube-scheduler            v1.28.2   7a5d9d67a13f   6 days ago      60.1MB
registry.k8s.io/kube-controller-manager   v1.28.2   55f13c92defb   6 days ago      122MB
registry.k8s.io/etcd                      3.5.9-0   73deb9a3f702   4 months ago    294MB
registry.k8s.io/coredns/coredns           v1.10.1   ead0a4a53df8   7 months ago    53.6MB
registry.k8s.io/pause                     3.9       e6f181688397   11 months ago   744kB

[email protected] ~]$  kubeadm init  --pod-network-cidr=10.244.0.0/16 --apiserver-advertise-address 10.0.0.9 --kubernetes-version 1.28.2
[init] Using Kubernetes version: v1.28.2
[preflight] Running pre-flight checks
[preflight] Pulling images required for setting up a Kubernetes cluster
[preflight] This might take a minute or two, depending on the speed of your internet connection
[preflight] You can also perform this action in beforehand using 'kubeadm config images pull'
W0920 10:00:37.404872  189311 checks.go:835] detected that the sandbox image "registry.k8s.io/pause:3.6" of the container runtime is inconsistent with that used by kubeadm. It is recommended that using "registry.k8s.io/pause:3.9" as the CRI sandbox image.
error execution phase preflight: [preflight] Some fatal errors occurred:
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-apiserver:v1.28.2: output: E0920 09:58:49.861618  193230 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to do request: Head \"https://registry.k8s.io/v2/kube-apiserver/manifests/v1.28.2\": dial tcp 34.96.108.209:443: connect: connection timed out" image="registry.k8s.io/kube-apiserver:v1.28.2"
time="2023-09-20T09:58:49+08:00" level=fatal msg="pulling image: rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to do request: Head \"https://registry.k8s.io/v2/kube-apiserver/manifests/v1.28.2\": dial tcp 34.96.108.209:443: connect: connection timed out"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-controller-manager:v1.28.2: output: E0920 09:59:25.701590  198076 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to do request: Head \"https://registry.k8s.io/v2/kube-controller-manager/manifests/v1.28.2\": dial tcp 34.96.108.209:443: connect: connection timed out" image="registry.k8s.io/kube-controller-manager:v1.28.2"
time="2023-09-20T09:59:25+08:00" level=fatal msg="pulling image: rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to do request: Head \"https://registry.k8s.io/v2/kube-controller-manager/manifests/v1.28.2\": dial tcp 34.96.108.209:443: connect: connection timed out"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-scheduler:v1.28.2: output: E0920 10:00:01.541534  203177 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to do request: Head \"https://registry.k8s.io/v2/kube-scheduler/manifests/v1.28.2\": dial tcp 34.96.108.209:443: connect: connection timed out" image="registry.k8s.io/kube-scheduler:v1.28.2"
time="2023-09-20T10:00:01+08:00" level=fatal msg="pulling image: rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to do request: Head \"https://registry.k8s.io/v2/kube-scheduler/manifests/v1.28.2\": dial tcp 34.96.108.209:443: connect: connection timed out"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-proxy:v1.28.2: output: E0920 10:00:37.381343  208045 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/kube-proxy:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-proxy:v1.28.2\": failed to do request: Head \"https://registry.k8s.io/v2/kube-proxy/manifests/v1.28.2\": dial tcp 34.96.108.209:443: connect: connection timed out" image="registry.k8s.io/kube-proxy:v1.28.2"
time="2023-09-20T10:00:37+08:00" level=fatal msg="pulling image: rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/kube-proxy:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-proxy:v1.28.2\": failed to do request: Head \"https://registry.k8s.io/v2/kube-proxy/manifests/v1.28.2\": dial tcp 34.96.108.209:443: connect: connection timed out"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/pause:3.9: output: E0920 10:01:13.222418  212982 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/pause:3.9\": failed to resolve reference \"registry.k8s.io/pause:3.9\": failed to do request: Head \"https://registry.k8s.io/v2/pause/manifests/3.9\": dial tcp 34.96.108.209:443: connect: connection timed out" image="registry.k8s.io/pause:3.9"
time="2023-09-20T10:01:13+08:00" level=fatal msg="pulling image: rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/pause:3.9\": failed to resolve reference \"registry.k8s.io/pause:3.9\": failed to do request: Head \"https://registry.k8s.io/v2/pause/manifests/3.9\": dial tcp 34.96.108.209:443: connect: connection timed out"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/etcd:3.5.9-0: output: E0920 10:01:49.061487  218037 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/etcd:3.5.9-0\": failed to resolve reference \"registry.k8s.io/etcd:3.5.9-0\": failed to do request: Head \"https://registry.k8s.io/v2/etcd/manifests/3.5.9-0\": dial tcp 34.96.108.209:443: connect: connection timed out" image="registry.k8s.io/etcd:3.5.9-0"
time="2023-09-20T10:01:49+08:00" level=fatal msg="pulling image: rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/etcd:3.5.9-0\": failed to resolve reference \"registry.k8s.io/etcd:3.5.9-0\": failed to do request: Head \"https://registry.k8s.io/v2/etcd/manifests/3.5.9-0\": dial tcp 34.96.108.209:443: connect: connection timed out"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/coredns/coredns:v1.10.1: output: E0920 10:02:24.905928  222882 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to resolve reference \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to do request: Head \"https://registry.k8s.io/v2/coredns/coredns/manifests/v1.10.1\": dial tcp 34.96.108.209:443: connect: connection timed out" image="registry.k8s.io/coredns/coredns:v1.10.1"
time="2023-09-20T10:02:24+08:00" level=fatal msg="pulling image: rpc error: code = Unknown desc = failed to pull and unpack image \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to resolve reference \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to do request: Head \"https://registry.k8s.io/v2/coredns/coredns/manifests/v1.10.1\": dial tcp 34.96.108.209:443: connect: connection timed out"
, error: exit status 1
[preflight] If you know what you are doing, you can make a check non-fatal with `--ignore-preflight-errors=...`
To see the stack trace of this error execute with --v=5 or higher
@neolit123
Copy link
Member

this reference resolve seems like a setup problem and not a kubeadm bug. kubeadm just shells out to crictl.

try asking for help on support channels.

/support

@github-actions
Copy link

Hello, @chicbyte 🤖 👋

You seem to have troubles using Kubernetes and kubeadm.
Note that our issue trackers should not be used for providing support to users.
There are special channels for that purpose.

Please see:

@github-actions github-actions bot added the kind/support Categorizes issue or PR as a support question. label Sep 20, 2023
@qiref
Copy link
Author

qiref commented Sep 20, 2023

@neolit123

[[email protected] ~]$ kubeadm init  --pod-network-cidr=10.244.0.0/16 --apiserver-advertise-address 10.0.0.9 --kubernetes-version 1.28.2 --image-repository 127.0.0.1:5000
[init] Using Kubernetes version: v1.28.2
[preflight] Running pre-flight checks
[preflight] Pulling images required for setting up a Kubernetes cluster
[preflight] This might take a minute or two, depending on the speed of your internet connection
[preflight] You can also perform this action in beforehand using 'kubeadm config images pull'
W0920 21:18:53.068345  422850 checks.go:835] detected that the sandbox image "registry.k8s.io/pause:3.6" of the container runtime is inconsistent with that used by kubeadm. It is recommended that using "127.0.0.1:5000/pause:3.9" as the CRI sandbox image.
[certs] Using certificateDir folder "/etc/kubernetes/pki"
[certs] Generating "ca" certificate and key
[certs] Generating "apiserver" certificate and key
[certs] apiserver serving cert is signed for DNS names [10.0.0.9 kubernetes kubernetes.default kubernetes.default.svc kubernetes.default.svc.cluster.local] and IPs [10.96.0.1 10.0.0.9]
[certs] Generating "apiserver-kubelet-client" certificate and key
[certs] Generating "front-proxy-ca" certificate and key
[certs] Generating "front-proxy-client" certificate and key
[certs] Generating "etcd/ca" certificate and key
[certs] Generating "etcd/server" certificate and key
[certs] etcd/server serving cert is signed for DNS names [10.0.0.9 localhost] and IPs [10.0.0.9 127.0.0.1 ::1]
[certs] Generating "etcd/peer" certificate and key
[certs] etcd/peer serving cert is signed for DNS names [10.0.0.9 localhost] and IPs [10.0.0.9 127.0.0.1 ::1]
[certs] Generating "etcd/healthcheck-client" certificate and key
[certs] Generating "apiserver-etcd-client" certificate and key
[certs] Generating "sa" key and public key
[kubeconfig] Using kubeconfig folder "/etc/kubernetes"
[kubeconfig] Writing "admin.conf" kubeconfig file
[kubeconfig] Writing "kubelet.conf" kubeconfig file
[kubeconfig] Writing "controller-manager.conf" kubeconfig file
[kubeconfig] Writing "scheduler.conf" kubeconfig file
[etcd] Creating static Pod manifest for local etcd in "/etc/kubernetes/manifests"
[control-plane] Using manifest folder "/etc/kubernetes/manifests"
[control-plane] Creating static Pod manifest for "kube-apiserver"
[control-plane] Creating static Pod manifest for "kube-controller-manager"
[control-plane] Creating static Pod manifest for "kube-scheduler"
[kubelet-start] Writing kubelet environment file with flags to file "/var/lib/kubelet/kubeadm-flags.env"
[kubelet-start] Writing kubelet configuration to file "/var/lib/kubelet/config.yaml"
[kubelet-start] Starting the kubelet
[wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory "/etc/kubernetes/manifests". This can take up to 4m0s
[kubelet-check] Initial timeout of 40s passed.

Unfortunately, an error has occurred:
        timed out waiting for the condition

This error is likely caused by:
        - The kubelet is not running
        - The kubelet is unhealthy due to a misconfiguration of the node in some way (required cgroups disabled)

If you are on a systemd-powered system, you can try to troubleshoot the error with the following commands:
        - 'systemctl status kubelet'
        - 'journalctl -xeu kubelet'

Additionally, a control plane component may have crashed or exited when started by the container runtime.
To troubleshoot, list all containers using your preferred container runtimes CLI.
Here is one example how you may list all running Kubernetes containers by using crictl:
        - 'crictl --runtime-endpoint unix:///var/run/containerd/containerd.sock ps -a | grep kube | grep -v pause'
        Once you have found the failing container, you can inspect its logs with:
        - 'crictl --runtime-endpoint unix:///var/run/containerd/containerd.sock logs CONTAINERID'
error execution phase wait-control-plane: couldn't initialize a Kubernetes cluster
To see the stack trace of this error execute with --v=5 or higher


[[email protected] ~]$ systemctl status kubelet -l
● kubelet.service - kubelet: The Kubernetes Node Agent
   Loaded: loaded (/usr/lib/systemd/system/kubelet.service; enabled; vendor preset: disabled)
  Drop-In: /usr/lib/systemd/system/kubelet.service.d
           └─10-kubeadm.conf
   Active: active (running) since Wed 2023-09-20 21:18:55 CST; 9min ago
     Docs: https://kubernetes.io/docs/
 Main PID: 423260 (kubelet)
    Tasks: 12
   Memory: 33.7M
   CGroup: /system.slice/kubelet.service
           └─423260 /usr/bin/kubelet --bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf --config=/var/lib/kubelet/config.yaml --container-runtime-endpoint=unix:///var/run/containerd/containerd.sock --pod-infra-container-image=127.0.0.1:5000/pause:3.9

Sep 20 21:28:17 10.0.0.9 kubelet[423260]: W0920 21:28:17.765026  423260 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.9:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused
Sep 20 21:28:17 10.0.0.9 kubelet[423260]: E0920 21:28:17.765088  423260 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.9:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused
Sep 20 21:28:18 10.0.0.9 kubelet[423260]: E0920 21:28:18.565448  423260 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to resolve reference \"registry.k8s.io/pause:3.6\": failed to do request: Head \"https://registry.k8s.io/v2/pause/manifests/3.6\": dial tcp 34.96.108.209:443: connect: connection timed out"
Sep 20 21:28:18 10.0.0.9 kubelet[423260]: E0920 21:28:18.565504  423260 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to resolve reference \"registry.k8s.io/pause:3.6\": failed to do request: Head \"https://registry.k8s.io/v2/pause/manifests/3.6\": dial tcp 34.96.108.209:443: connect: connection timed out" pod="kube-system/kube-controller-manager-10.0.0.9"
Sep 20 21:28:18 10.0.0.9 kubelet[423260]: E0920 21:28:18.565525  423260 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to resolve reference \"registry.k8s.io/pause:3.6\": failed to do request: Head \"https://registry.k8s.io/v2/pause/manifests/3.6\": dial tcp 34.96.108.209:443: connect: connection timed out" pod="kube-system/kube-controller-manager-10.0.0.9"
Sep 20 21:28:18 10.0.0.9 kubelet[423260]: E0920 21:28:18.565583  423260 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"kube-controller-manager-10.0.0.9_kube-system(f733c82d75583dcae079c5e4c518df80)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"kube-controller-manager-10.0.0.9_kube-system(f733c82d75583dcae079c5e4c518df80)\\\": rpc error: code = Unknown desc = failed to get sandbox image \\\"registry.k8s.io/pause:3.6\\\": failed to pull image \\\"registry.k8s.io/pause:3.6\\\": failed to pull and unpack image \\\"registry.k8s.io/pause:3.6\\\": failed to resolve reference \\\"registry.k8s.io/pause:3.6\\\": failed to do request: Head \\\"https://registry.k8s.io/v2/pause/manifests/3.6\\\": dial tcp 34.96.108.209:443: connect: connection timed out\"" pod="kube-system/kube-controller-manager-10.0.0.9" podUID="f733c82d75583dcae079c5e4c518df80"
Sep 20 21:28:20 10.0.0.9 kubelet[423260]: E0920 21:28:20.399033  423260 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"10.0.0.9.17869de9a31b56ac", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"10.0.0.9", UID:"10.0.0.9", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node 10.0.0.9 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"10.0.0.9"}, FirstTimestamp:time.Date(2023, time.September, 20, 21, 18, 56, 540989100, time.Local), LastTimestamp:time.Date(2023, time.September, 20, 21, 18, 56, 552125284, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"10.0.0.9"}': 'Patch "https://10.0.0.9:6443/api/v1/namespaces/default/events/10.0.0.9.17869de9a31b56ac": dial tcp 10.0.0.9:6443: connect: connection refused'(may retry after sleeping)
Sep 20 21:28:22 10.0.0.9 kubelet[423260]: E0920 21:28:22.127685  423260 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.9:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/10.0.0.9?timeout=10s\": dial tcp 10.0.0.9:6443: connect: connection refused" interval="7s"
Sep 20 21:28:22 10.0.0.9 kubelet[423260]: I0920 21:28:22.286793  423260 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.9"
Sep 20 21:28:22 10.0.0.9 kubelet[423260]: E0920 21:28:22.287069  423260 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.9:6443/api/v1/nodes\": dial tcp 10.0.0.9:6443: connect: connection refused" node="10.0.0.9"

I pushed the images to local docker hub, but kubeadm init command failed again because it was looking for pause3.6

Note: pause3.6 is already exists in local and local docker hub

[[email protected] ~]$ docker images |grep pause
127.0.0.1:5000/pause                                     3.9            e6f181688397   11 months ago   744kB
registry.k8s.io/pause                                    3.9            e6f181688397   11 months ago   744kB
127.0.0.1:5000/pause                                     3.6            6270bb605e12   2 years ago     683kB
registry.k8s.io/pause                                    3.6            6270bb605e12   2 years ago     683kB

I found the same question on stackoverflow :
https://stackoverflow.com/questions/76801956/kubernetes-1-27-4-init-fails-for-offline-environment

@neolit123
Copy link
Member

i don't see a kubeadm bug but something is not ok with the kubelet. kubeadm passes --pod-infra-container-image but the kubelet still uses a different image (the hardcoded one)?

@chicbyte

make sure your container runtime config uses the same pause image.

https://kubernetes.io/docs/setup/production-environment/container-runtimes/#override-pause-image-containerd

if it's already the same, please log a kubernetes/kubernetes ticket, tag it with "/sig node" and show your kubelet logs.
then mention the new ticket here.
thank you

@qiref
Copy link
Author

qiref commented Sep 21, 2023

@neolit123

[[email protected] ~]$ cat /etc/containerd/config.toml 
#   Copyright 2018-2022 Docker Inc.

#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at

#       http://www.apache.org/licenses/LICENSE-2.0

#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.

# disabled_plugins = ["cri"]

enabled_plugins = ["cri"]

[plugins."io.containerd.grpc.v1.cri"]
  sandbox_image = "127.0.0.1:5000/pause:3.9"

#root = "/var/lib/containerd"
#state = "/run/containerd"
#subreaper = true
#oom_score = 0

#[grpc]
#  address = "/run/containerd/containerd.sock"
#  uid = 0
#  gid = 0

#[debug]
#  address = "/run/containerd/debug.sock"
#  uid = 0
#  gid = 0
#  level = "info"

[[email protected] ~]$ docker images |grep 127.0.0.1:5000/pause
127.0.0.1:5000/pause                                     3.9            e6f181688397   11 months ago   744kB
127.0.0.1:5000/pause                                     3.6            6270bb605e12   2 years ago     683kB
[[email protected] ~]$ systemctl status kubelet -l
● kubelet.service - kubelet: The Kubernetes Node Agent
   Loaded: loaded (/usr/lib/systemd/system/kubelet.service; enabled; vendor preset: disabled)
  Drop-In: /usr/lib/systemd/system/kubelet.service.d
           └─10-kubeadm.conf
   Active: active (running) since Thu 2023-09-21 15:52:03 CST; 4min 18s ago
     Docs: https://kubernetes.io/docs/
 Main PID: 284761 (kubelet)
    Tasks: 12
   Memory: 31.4M
   CGroup: /system.slice/kubelet.service
           └─284761 /usr/bin/kubelet --bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf --config=/var/lib/kubelet/config.yaml --container-runtime-endpoint=unix:///var/run/containerd/containerd.sock --pod-infra-container-image=127.0.0.1:5000/pause:3.9

Sep 21 15:56:14 10.0.0.9 kubelet[284761]: I0921 15:56:14.836109  284761 kubelet_node_status.go:70] "Attempting to register node" node="10.0.0.9"
Sep 21 15:56:14 10.0.0.9 kubelet[284761]: E0921 15:56:14.836426  284761 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.9:6443/api/v1/nodes\": dial tcp 10.0.0.9:6443: connect: connection refused" node="10.0.0.9"
Sep 21 15:56:15 10.0.0.9 kubelet[284761]: W0921 15:56:15.985262  284761 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.9:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused
Sep 21 15:56:15 10.0.0.9 kubelet[284761]: E0921 15:56:15.985320  284761 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.9:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.9:6443: connect: connection refused
Sep 21 15:56:18 10.0.0.9 kubelet[284761]: E0921 15:56:18.703164  284761 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.9:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.9:6443: connect: connection refused
Sep 21 15:56:20 10.0.0.9 kubelet[284761]: E0921 15:56:20.678532  284761 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to resolve reference \"registry.k8s.io/pause:3.6\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/pause/manifests/3.6\": dial tcp 74.125.23.82:443: connect: connection timed out"
Sep 21 15:56:20 10.0.0.9 kubelet[284761]: E0921 15:56:20.678585  284761 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to resolve reference \"registry.k8s.io/pause:3.6\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/pause/manifests/3.6\": dial tcp 74.125.23.82:443: connect: connection timed out" pod="kube-system/kube-scheduler-10.0.0.9"
Sep 21 15:56:20 10.0.0.9 kubelet[284761]: E0921 15:56:20.678606  284761 kuberuntime_manager.go:1166] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to resolve reference \"registry.k8s.io/pause:3.6\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/pause/manifests/3.6\": dial tcp 74.125.23.82:443: connect: connection timed out" pod="kube-system/kube-scheduler-10.0.0.9"
Sep 21 15:56:20 10.0.0.9 kubelet[284761]: E0921 15:56:20.678679  284761 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"kube-scheduler-10.0.0.9_kube-system(ca770b8a1a7a59c24812ce433ceddd19)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"kube-scheduler-10.0.0.9_kube-system(ca770b8a1a7a59c24812ce433ceddd19)\\\": rpc error: code = Unknown desc = failed to get sandbox image \\\"registry.k8s.io/pause:3.6\\\": failed to pull image \\\"registry.k8s.io/pause:3.6\\\": failed to pull and unpack image \\\"registry.k8s.io/pause:3.6\\\": failed to resolve reference \\\"registry.k8s.io/pause:3.6\\\": failed to do request: Head \\\"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/pause/manifests/3.6\\\": dial tcp 74.125.23.82:443: connect: connection timed out\"" pod="kube-system/kube-scheduler-10.0.0.9" podUID="ca770b8a1a7a59c24812ce433ceddd19"
Sep 21 15:56:21 10.0.0.9 kubelet[284761]: E0921 15:56:21.710433  284761 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.9:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/10.0.0.9?timeout=10s\": dial tcp 10.0.0.9:6443: connect: connection refused" interval="7s"

It was still looking for registry.k8s.io/pause:3.6 , what should I do to change this config?

@neolit123
Copy link
Member

neolit123 commented Sep 21, 2023

It was still looking for registry.k8s.io/pause:3.6 , what should I do to change this config?

if it's already the same, please log a kubernetes/kubernetes ticket, tag it with "/sig node" and show your kubelet logs.
then mention the new ticket here.
thank you

@pacoxu
Copy link
Member

pacoxu commented Sep 21, 2023

As Lubomir pointed out, this is not related to kubeadm anymore.

systemctl status containerd to check its process if the containerd configuration is loaded. Please restart the containerd if you changed the configuration. Or check containerd log to see why the configuration is not loading as expected.

@qiref
Copy link
Author

qiref commented Sep 21, 2023

@neolit123 @pacoxu Thanks for your help.
I found the same issue #2851 , and now problem solved.

@Don-James-shrinp
Copy link

Don-James-shrinp commented Mar 7, 2024

@neolit123 @pacoxu Thanks for your help. I found the same issue #2851 , and now problem solved.

how to solve the problem, i met the same problem as you, i've got all the images to init the k8s cluster, but it still pull images from remote.
this is my local images.

[root@master ~]# docker images
REPOSITORY                                TAG       IMAGE ID       CREATED         SIZE
mudnewbie/test                            7.0       e55c0812ee41   27 hours ago    5.4GB
registry.k8s.io/kube-apiserver            v1.28.2   cdcab12b2dd1   5 months ago    126MB
registry.k8s.io/kube-controller-manager   v1.28.2   55f13c92defb   5 months ago    122MB
registry.k8s.io/kube-scheduler            v1.28.2   7a5d9d67a13f   5 months ago    60.1MB
registry.k8s.io/kube-proxy                v1.28.2   c120fed2beb8   5 months ago    73.1MB
registry.k8s.io/etcd                      3.5.9-0   73deb9a3f702   9 months ago    294MB
registry.k8s.io/coredns                   v1.10.1   ead0a4a53df8   13 months ago   53.6MB
registry.k8s.io/pause                     3.9       e6f181688397   17 months ago   744kB

this is the init logs.

[init] Using Kubernetes version: v1.28.2
[preflight] Running pre-flight checks
[preflight] Pulling images required for setting up a Kubernetes cluster
[preflight] This might take a minute or two, depending on the speed of your internet connection
[preflight] You can also perform this action in beforehand using 'kubeadm config images pull'
W0307 20:37:32.201678   29726 checks.go:835] detected that the sandbox image "registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.9" of the container runtime is inconsistent with that used by kubeadm. It is recommended that using "registry.k8s.io/pause:3.9" as the CRI sandbox image.
error execution phase preflight: [preflight] Some fatal errors occurred:
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-apiserver:v1.28.2: output: E0307 20:29:45.970404   29783 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-apiserver/manifests/v1.28.2\": dial tcp 173.194.174.82:443: i/o timeout" image="registry.k8s.io/kube-apiserver:v1.28.2"
time="2024-03-07T20:29:45+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-apiserver/manifests/v1.28.2\": dial tcp 173.194.174.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-controller-manager:v1.28.2: output: E0307 20:32:22.769445   29824 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-controller-manager/manifests/v1.28.2\": dial tcp 142.251.170.82:443: i/o timeout" image="registry.k8s.io/kube-controller-manager:v1.28.2"
time="2024-03-07T20:32:22+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-controller-manager/manifests/v1.28.2\": dial tcp 142.251.170.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-scheduler:v1.28.2: output: E0307 20:34:57.365710   29860 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-scheduler/manifests/v1.28.2\": dial tcp 108.177.125.82:443: i/o timeout" image="registry.k8s.io/kube-scheduler:v1.28.2"
time="2024-03-07T20:34:57+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-scheduler/manifests/v1.28.2\": dial tcp 108.177.125.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-proxy:v1.28.2: output: E0307 20:37:32.171182   29896 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-proxy:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-proxy:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-proxy/manifests/v1.28.2\": dial tcp 108.177.125.82:443: i/o timeout" image="registry.k8s.io/kube-proxy:v1.28.2"
time="2024-03-07T20:37:32+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-proxy:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-proxy:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-proxy/manifests/v1.28.2\": dial tcp 108.177.125.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/pause:3.9: output: E0307 20:40:09.220777   29939 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/pause:3.9\": failed to resolve reference \"registry.k8s.io/pause:3.9\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/pause/manifests/3.9\": dial tcp 142.250.157.82:443: i/o timeout" image="registry.k8s.io/pause:3.9"
time="2024-03-07T20:40:09+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/pause:3.9\": failed to resolve reference \"registry.k8s.io/pause:3.9\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/pause/manifests/3.9\": dial tcp 142.250.157.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/etcd:3.5.9-0: output: E0307 20:42:43.494045   29980 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/etcd:3.5.9-0\": failed to resolve reference \"registry.k8s.io/etcd:3.5.9-0\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/etcd/manifests/3.5.9-0\": dial tcp 64.233.187.82:443: i/o timeout" image="registry.k8s.io/etcd:3.5.9-0"
time="2024-03-07T20:42:43+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/etcd:3.5.9-0\": failed to resolve reference \"registry.k8s.io/etcd:3.5.9-0\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/etcd/manifests/3.5.9-0\": dial tcp 64.233.187.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/coredns/coredns:v1.10.1: output: E0307 20:45:20.049924   30018 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to resolve reference \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/coredns/coredns/manifests/v1.10.1\": dial tcp 64.233.189.82:443: i/o timeout" image="registry.k8s.io/coredns/coredns:v1.10.1"
time="2024-03-07T20:45:20+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to resolve reference \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/coredns/coredns/manifests/v1.10.1\": dial tcp 64.233.189.82:443: i/o timeout"
, error: exit status 1
[preflight] If you know what you are doing, you can make a check non-fatal with `--ignore-preflight-errors=...`
To see the stack trace of this error execute with --v=5 or higher

@Don-James-shrinp
Copy link

@neolit123 @pacoxu Thanks for your help. I found the same issue #2851 , and now problem solved.

how to solve the problem, i met the same problem as you, i've got all the images to init the k8s cluster, but it still pull images from remote. this is my local images.

[root@master ~]# docker images
REPOSITORY                                TAG       IMAGE ID       CREATED         SIZE
mudnewbie/test                            7.0       e55c0812ee41   27 hours ago    5.4GB
registry.k8s.io/kube-apiserver            v1.28.2   cdcab12b2dd1   5 months ago    126MB
registry.k8s.io/kube-controller-manager   v1.28.2   55f13c92defb   5 months ago    122MB
registry.k8s.io/kube-scheduler            v1.28.2   7a5d9d67a13f   5 months ago    60.1MB
registry.k8s.io/kube-proxy                v1.28.2   c120fed2beb8   5 months ago    73.1MB
registry.k8s.io/etcd                      3.5.9-0   73deb9a3f702   9 months ago    294MB
registry.k8s.io/coredns                   v1.10.1   ead0a4a53df8   13 months ago   53.6MB
registry.k8s.io/pause                     3.9       e6f181688397   17 months ago   744kB

this is the init logs.

[init] Using Kubernetes version: v1.28.2
[preflight] Running pre-flight checks
[preflight] Pulling images required for setting up a Kubernetes cluster
[preflight] This might take a minute or two, depending on the speed of your internet connection
[preflight] You can also perform this action in beforehand using 'kubeadm config images pull'
W0307 20:37:32.201678   29726 checks.go:835] detected that the sandbox image "registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.9" of the container runtime is inconsistent with that used by kubeadm. It is recommended that using "registry.k8s.io/pause:3.9" as the CRI sandbox image.
error execution phase preflight: [preflight] Some fatal errors occurred:
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-apiserver:v1.28.2: output: E0307 20:29:45.970404   29783 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-apiserver/manifests/v1.28.2\": dial tcp 173.194.174.82:443: i/o timeout" image="registry.k8s.io/kube-apiserver:v1.28.2"
time="2024-03-07T20:29:45+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-apiserver:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-apiserver/manifests/v1.28.2\": dial tcp 173.194.174.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-controller-manager:v1.28.2: output: E0307 20:32:22.769445   29824 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-controller-manager/manifests/v1.28.2\": dial tcp 142.251.170.82:443: i/o timeout" image="registry.k8s.io/kube-controller-manager:v1.28.2"
time="2024-03-07T20:32:22+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-controller-manager:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-controller-manager/manifests/v1.28.2\": dial tcp 142.251.170.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-scheduler:v1.28.2: output: E0307 20:34:57.365710   29860 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-scheduler/manifests/v1.28.2\": dial tcp 108.177.125.82:443: i/o timeout" image="registry.k8s.io/kube-scheduler:v1.28.2"
time="2024-03-07T20:34:57+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-scheduler:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-scheduler/manifests/v1.28.2\": dial tcp 108.177.125.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/kube-proxy:v1.28.2: output: E0307 20:37:32.171182   29896 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-proxy:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-proxy:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-proxy/manifests/v1.28.2\": dial tcp 108.177.125.82:443: i/o timeout" image="registry.k8s.io/kube-proxy:v1.28.2"
time="2024-03-07T20:37:32+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/kube-proxy:v1.28.2\": failed to resolve reference \"registry.k8s.io/kube-proxy:v1.28.2\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/kube-proxy/manifests/v1.28.2\": dial tcp 108.177.125.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/pause:3.9: output: E0307 20:40:09.220777   29939 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/pause:3.9\": failed to resolve reference \"registry.k8s.io/pause:3.9\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/pause/manifests/3.9\": dial tcp 142.250.157.82:443: i/o timeout" image="registry.k8s.io/pause:3.9"
time="2024-03-07T20:40:09+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/pause:3.9\": failed to resolve reference \"registry.k8s.io/pause:3.9\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/pause/manifests/3.9\": dial tcp 142.250.157.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/etcd:3.5.9-0: output: E0307 20:42:43.494045   29980 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/etcd:3.5.9-0\": failed to resolve reference \"registry.k8s.io/etcd:3.5.9-0\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/etcd/manifests/3.5.9-0\": dial tcp 64.233.187.82:443: i/o timeout" image="registry.k8s.io/etcd:3.5.9-0"
time="2024-03-07T20:42:43+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/etcd:3.5.9-0\": failed to resolve reference \"registry.k8s.io/etcd:3.5.9-0\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/etcd/manifests/3.5.9-0\": dial tcp 64.233.187.82:443: i/o timeout"
, error: exit status 1
        [ERROR ImagePull]: failed to pull image registry.k8s.io/coredns/coredns:v1.10.1: output: E0307 20:45:20.049924   30018 remote_image.go:171] "PullImage from image service failed" err="rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to resolve reference \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/coredns/coredns/manifests/v1.10.1\": dial tcp 64.233.189.82:443: i/o timeout" image="registry.k8s.io/coredns/coredns:v1.10.1"
time="2024-03-07T20:45:20+08:00" level=fatal msg="pulling image: rpc error: code = DeadlineExceeded desc = failed to pull and unpack image \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to resolve reference \"registry.k8s.io/coredns/coredns:v1.10.1\": failed to do request: Head \"https://us-west2-docker.pkg.dev/v2/k8s-artifacts-prod/images/coredns/coredns/manifests/v1.10.1\": dial tcp 64.233.189.82:443: i/o timeout"
, error: exit status 1
[preflight] If you know what you are doing, you can make a check non-fatal with `--ignore-preflight-errors=...`
To see the stack trace of this error execute with --v=5 or higher

Oh, I found where the problem is. I didn't config kubeadm correctly, i need to config the repository namespace in kubeadm, below is the config yaml file.

apiVersion: kubeadm.k8s.io/v1beta3
bootstrapTokens:
- groups:
  - system:bootstrappers:kubeadm:default-node-token
  token: dy42df.qrsmyv39pncjqanc
  ttl: 24h0m0s
  usages:
  - signing
  - authentication
kind: InitConfiguration
localAPIEndpoint:
  advertiseAddress: 192.168.1.241
  bindPort: 6443
nodeRegistration:
  criSocket: unix:///var/run/containerd/containerd.sock
  imagePullPolicy: IfNotPresent
  name: master
  taints:
  - effect: NoSchedule
    key: node-role.kubernetes.io/control-plane
---
apiServer:
  certSANs:
  - master
  - xx.xx.xx.xx  # ip address
  - 192.168.1.241
  - 10.96.0.1
  timeoutForControlPlane: 4m0s
apiVersion: kubeadm.k8s.io/v1beta3
certificatesDir: /etc/kubernetes/pki
clusterName: kubernetes
controlPlaneEndpoint: xx.xx.xx.xx:6443 # ip address
controllerManager: {}
dns: {}
etcd:
  local:
    dataDir: /var/lib/etcd
imageRepository: registry.cn-hangzhou.aliyuncs.com/google_containers
kind: ClusterConfiguration
kubernetesVersion: v1.28.2
networking:
  dnsDomain: cluster.local
  podSubnet: 10.244.0.0/16
  serviceSubnet: 10.96.0.0/12
scheduler: {}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/support Categorizes issue or PR as a support question.
Projects
None yet
Development

No branches or pull requests

4 participants