nginx-controller pods in ImageInspectError due to unqualified notation with cri-o

[kubealex]

NGINX Ingress controller version:

Any

Kubernetes version (use kubectl version):

1.18.x
Environment:

• Cloud provider or hardware configuration: vms
• OS (e.g. from /etc/os-release): centos7
• Kernel (e.g. uname -a): any
• Install tools: kubeadm
• Others: cri-o as container runtime

What happened:

Using unqualified images in the pods results in an error while creating the pods:

[kube@k8s-master-0 ~]$ sudo crictl pull alpine:latest
FATA[0000] pulling image failed: rpc error: code = Unknown desc = no registries configured while trying to pull an unqualified image, add at least one in either /etc/crio/crio.conf or /etc/containers/registries.conf

This happens even with controller pod and acceptor.

What you expected to happen:

Nginx installing as usual

How to reproduce it:

Install cri-o as runtime
Install any network plugin
Install nginx-ingress-controller

Enjoy the error

Anything else we need to know:

I opened cri-o/cri-o#3884
But the cause is controller images using an unqualified notation.
Please add the registry location

/kind bug

[aledbf]

@kubealex I am sorry but I don't understand what are you reporting exactly.
How are you installing the ingress controller? The pull command you are showing is not related to ingress-nginx

[kubealex]

Using an unqualified image Is not allowed by default on cri-o, so using unqualified names in the respurces created results in an error, like in:

https://www.github.com/kubernetes/ingress-nginx/tree/master/deploystaticproviderbaremetaldeploy.yaml

As you can see, you refer to images like:

image: jettech/kube-webhook-certgen:v1.2.0

In the admission job and:

image: jettech/kube-webhook-certgen:v1.2.0

In the webhook certgen job.

This results in an error.

I Just posted a random pull from an unqualified registry like you did in the jobs to show you the error.