<p>I create a private Docker registry without username and password, only with TLS.</p>

<pre><code>rpc error: code = Unknown desc = Error response from daemon: Get https://&lt;my-domain&gt;/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
Warning  Failed     14m (x4 over 16m)    kubelet, ip-172-10-10-157  Error: ErrImagePull
</code></pre>

<p>I tried with </p>

<pre><code>kubectl create secret docker-registry docker-registry-dev --docker-server=&lt;my-domain&gt; 
</code></pre>

<p>And I get this error:</p>

<pre><code>required flag(s) "docker-password", "docker-username" not set
</code></pre>

<p>From the command line with docker I can pull correct my docker image.</p>

<p>Any ideas for Kubernetes?</p>

<p>This really should work out of the box without <code>imagePullSecrets</code> and considering your registry has valid and signed certs. It looks more like your node cannot connect to <code>https://&lt;my-domain&gt;/v2/</code>.  A couple of things you can check:</p>

<ol>
<li><p>Your registry's <a href="https://docs.docker.com/registry/configuration/#http" rel="nofollow noreferrer">http</a> section is configured to listen on https on the right port.</p></li>
<li><p>Check with something like <code>curl https://registry-name/v2/</code> from one of your Kubernetes nodes and that you have connectivity.</p></li>
</ol>
