{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/43924","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/43924/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/43924/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/43924/events","html_url":"https://github.com/kubernetes/kubernetes/issues/43924","id":218604410,"number":43924,"title":"Failed to pull image with \"x509: certificate signed by unknown authority\" error","user":{"login":"rushilpaul","id":11234620,"avatar_url":"https://avatars0.githubusercontent.com/u/11234620?v=4","gravatar_id":"","url":"https://api.github.com/users/rushilpaul","html_url":"https://github.com/rushilpaul","followers_url":"https://api.github.com/users/rushilpaul/followers","following_url":"https://api.github.com/users/rushilpaul/following{/other_user}","gists_url":"https://api.github.com/users/rushilpaul/gists{/gist_id}","starred_url":"https://api.github.com/users/rushilpaul/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rushilpaul/subscriptions","organizations_url":"https://api.github.com/users/rushilpaul/orgs","repos_url":"https://api.github.com/users/rushilpaul/repos","events_url":"https://api.github.com/users/rushilpaul/events{/privacy}","received_events_url":"https://api.github.com/users/rushilpaul/received_events","type":"User","site_admin":false},"labels":[{"id":105146071,"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/bug","name":"kind/bug","color":"e11d21","default":false},{"id":173493665,"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/sig/node","name":"sig/node","color":"d2b48c","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":15,"created_at":"2017-03-31T20:09:24Z","updated_at":"2017-11-08T19:12:07Z","closed_at":null,"author_association":"NONE","body":"<!-- Thanks for filing an issue! Before hitting the button, please answer these questions.-->\r\n\r\n**BUG REPORT**\r\n\r\n<!--\r\nIf this is a BUG REPORT, please:\r\n  - Fill in as much of the template below as you can.  If you leave out\r\n    information, we can't help you as well.\r\n\r\nIf this is a FEATURE REQUEST, please:\r\n  - Describe *in detail* the feature/behavior/change you'd like to see.\r\n\r\nIn both cases, be ready for followup questions, and please respond in a timely\r\nmanner.  If we can't reproduce a bug or think a feature already exists, we\r\nmight close your issue.  If we're wrong, PLEASE feel free to reopen it and\r\nexplain why.\r\n-->\r\n\r\n**Kubernetes version** :\r\n\r\nClient Version: version.Info{Major:\"1\", Minor:\"5\", GitVersion:\"v1.5.2\", GitCommit:\"08e099554f3c31f6e6f07b448ab3ed78d0520507\", GitTreeState:\"clean\", BuildDate:\"2017-01-12T04:57:25Z\", GoVersion:\"go1.7.4\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\n\r\nServer Version: version.Info{Major:\"1\", Minor:\"5\", GitVersion:\"v1.5.2\", GitCommit:\"08e099554f3c31f6e6f07b448ab3ed78d0520507\", GitTreeState:\"clean\", BuildDate:\"2017-01-12T04:52:34Z\", GoVersion:\"go1.7.4\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\n\r\n\r\n**Environment**:\r\n- **Cloud provider or hardware configuration**:\r\n- **OS**: CentOS Linux 7\r\n- **Kernel**: Linux kubernetes-master-3302 3.10.0-327.el7.x86_64 #1 SMP Thu Nov 19 22:10:57 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux\r\n\r\n\r\n**What happened**:\r\nI used the below command to create a POD:\r\n`kubectl create --insecure-skip-tls-verify -f monitorms-rc.yml`\r\nI get this `monitorms-mmqhm                0/1       ImagePullBackOff`\r\n\r\nand upon running\r\n  `kubectl describe pod monitorms-mmqhm --namespace=sample`\r\nIt said `Warning\t\tFailed\t\tFailed to pull image \"10.78.0.228:5000/monitorms\": Error response from daemon: {\"message\":\"Get https://10.78.0.228:5000/v1/_ping: x509: certificate signed by unknown authority\"}`\r\n\r\nThere is no certificate mentioned anywhere in my deployment configuration anywhere.\r\n\r\n10.78.0.228 is running a private insecured docker registry.\r\nShould Kubernetes not ignore the server certificate with that --insecure-skip-tls-verify flag ?\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/342927185","html_url":"https://github.com/kubernetes/kubernetes/issues/43924#issuecomment-342927185","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/43924","id":342927185,"user":{"login":"pompomJuice","id":1815319,"avatar_url":"https://avatars1.githubusercontent.com/u/1815319?v=4","gravatar_id":"","url":"https://api.github.com/users/pompomJuice","html_url":"https://github.com/pompomJuice","followers_url":"https://api.github.com/users/pompomJuice/followers","following_url":"https://api.github.com/users/pompomJuice/following{/other_user}","gists_url":"https://api.github.com/users/pompomJuice/gists{/gist_id}","starred_url":"https://api.github.com/users/pompomJuice/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pompomJuice/subscriptions","organizations_url":"https://api.github.com/users/pompomJuice/orgs","repos_url":"https://api.github.com/users/pompomJuice/repos","events_url":"https://api.github.com/users/pompomJuice/events{/privacy}","received_events_url":"https://api.github.com/users/pompomJuice/received_events","type":"User","site_admin":false},"created_at":"2017-11-08T19:12:07Z","updated_at":"2017-11-08T19:12:07Z","author_association":"CONTRIBUTOR","body":"Exactly my point. That curl error is just plain wrong. It is telling you that you have the certificates but they are self signed. I find that highly unlikely. \r\n\r\nThat means that that error message is just plain wrong. This connects with my previous point that almost nobody implements this stuff correctly. "}}
{"actor":{"display_login":"pompomJuice"}}