<p>I tried to deploy 'deployments' in kubernetes which is pull docker image from private registry (I don't know who did this setup) but during &quot;docker pull images&quot; through kubernetes i'm getting following error</p>
<pre><code>node.kubernetes.io/unreachable:NoExecute for 300s
Events:
  Type     Reason     Age                From               Message
  ----     ------     ----               ----               -------
  Normal   Scheduled  85s                default-scheduler  Successfully assigned default/trusted-enc-assettag1-deployment-8467b74958-6fbp7 to k8s-node
  Normal   BackOff    24s (x2 over 61s)  kubelet, k8s-node  Back-off pulling image &quot;10.105.168.81:5000/simplehttpserverenc:enc_v1&quot;
  Warning  Failed     24s (x2 over 61s)  kubelet, k8s-node  Error: ImagePullBackOff
  Normal   Pulling    12s (x3 over 82s)  kubelet, k8s-node  Pulling image &quot;10.105.168.81:5000/simplehttpserverenc:enc_v1&quot;
  Warning  Failed     0s (x3 over 62s)   kubelet, k8s-node  Failed to pull image &quot;10.105.168.81:5000/simplehttpserverenc:enc_v1&quot;: rpc error: code = Unknown desc = Error response from daemon: Get https://10.105.168.81:5000/v2/: net/http: TLS handshake timeout
  Warning  Failed     0s (x3 over 62s)   kubelet, k8s-node  Error: ErrImagePull
[root@k8s-master ~]# docker pull 10.105.168.81:5000/simplehttpserverenc:enc_v1
</code></pre>
<p>ImagePullBackOff and net/http: TLS handshake timeout error.</p>
<p>Initially this &quot;net/http: TLS handshake timeout&quot; error is observed in docker pull as well. I referred some answers and</p>
<blockquote>
<p>configured certificate(/etc/docker/certs.d//ca.crt ) and
proxy (/etc/systemd/system/docker.service.d/proxy.conf)</p>
</blockquote>
<p>after that able to perform docker pull from private image.</p>
<pre><code>[root@k8s-master ~]# docker pull 10.105.168.81:5000/simplehttpserverenc:enc_v1
enc_v1: Pulling from simplehttpserverenc
54fec2fa59d0: Pull complete
cd3f35d84cab: Pull complete
a0afc8e92ef0: Pull complete
9691f23efdb7: Pull complete
6512e60b314b: Pull complete
a8ac6632d329: Pull complete
68f4c4e0aa8c: Pull complete
Digest: sha256:0358708cd11e96f6cf6f22b29d46a8eec50d7107597b866e1616a73a198fe797
Status: Downloaded newer image for 10.105.168.81:5000/simplehttpserverenc:enc_v1
10.105.168.81:5000/simplehttpserverenc:enc_v1
[root@k8s-master ~]#
</code></pre>
<p>But still unable to perform this docker pull through kubernetes. How to solve this ?</p>

<p>If you use docker as container engine in your k8s, AFAIK it's the same with <a href="https://docs.docker.com/engine/security/certificates/#understand-the-configuration" rel="nofollow noreferrer">Understand the configuration</a>. Because the image pulling is conducted by the container engine and it depends the proprietary configuration of each one on the certificates. How about pulling the same image on the worker node in your k8s ? Is it possible to pull the one without errors ?</p>
