我的吊舱处于容器创建状态，显示TLS握手超时

Question

我使用docker pull命令可以正确地拉出镜像，但是当我使用kubectl run命令时，我的pod处于ContainerCreating状态，我该如何修复它。

deployment "my-nginx" created

[root@centos-master etc]#kubectl获得豆荚

NAME                             READY     STATUS              RESTARTS   AGE
my-nginx-2723453542-5s33f        0/1       ContainerCreating   0          7s

[root@centos-master etc]#kubectl Description pod my-nginx-2723453542-5s33f

Name:       my-nginx-2723453542-5s33f
Namespace:  default
Node:       centos-minion-2/104.21.51.35
Start Time: Fri, 30 Aug 2019 16:11:57 +0800
Labels:     pod-template-hash=2723453542
        run=my-nginx
Status:     Pending
IP:     
Controllers:    ReplicaSet/my-nginx-2723453542
Containers:
  my-nginx:
    Container ID:       
    Image:          nginx
    Image ID:           
    Port:           
    State:          Waiting
      Reason:           ContainerCreating
    Ready:          False
    Restart Count:      0
    Volume Mounts:      <none>
    Environment Variables:  <none>
Conditions:
  Type      Status
  Initialized   True 
  Ready     False 
  PodScheduled  True 
No volumes.
QoS Class:  BestEffort
Tolerations:    <none>
Events:
  FirstSeen LastSeen    Count   From                SubObjectPath   Type        Reason      Message
  --------- --------    -----   ----                -------------   --------    ------      -------
  5m        5m      1   {default-scheduler }                Normal      Scheduled   Successfully assigned my-nginx-2723453542-5s33f to centos-minion-2
  <invalid> <invalid>   5   {kubelet centos-minion-2}           Warning     FailedSync  Error syncing pod, skipping: failed to "StartContainer" for "POD" with ErrImagePull: "image pull failed for registry.access.redhat.com/rhel7/pod-infrastructure:latest, this may be because there are no credentials on this request.  details: (Get https://registry.access.redhat.com/v1/_ping: proxyconnect tcp: net/http: TLS handshake timeout)"

  <invalid> <invalid>   11  {kubelet centos-minion-2}       Warning FailedSync  Error syncing pod, skipping: failed to "StartContainer" for "POD" with ImagePullBackOff: "Back-off pulling image \"registry.access.redhat.com/rhel7/pod-infrastructure:latest\""

Answer 1

按照@char和@prometherion的建议，为了解决这个问题，您可能需要按照所提供的链接提供kubelet_args参数和适当的--pod-infra-container-image标志：

KUBELET_POD_INFRA_CONTAINER="--pod-infra-container-image=registry.access.redhat.com/rhel7/pod-infrastructure:latest"

您还可以考虑@Matthew提到的安装subscription-manager包和订阅主机OS的解决方案，如下所述。