Hi has anyone experienced the following error that the Kuber

Question

Hi has anyone experienced the following error that the Kubernetes Jobs cannot pull an public image It gives the following error Inserted in the thread

Parwez Noori · Answer

```Failed to pull image nginx rpc error code = Unknown desc = failed to pull and unpack image failed to resolve reference failed to do request Head dial tcp lookup on 1 53 read udp 1 38431 gt 1 53 read connection refused```

Parwez Noori · Answer

Is it possible for the kubernetes cluster to fetch the image locally

Christopher Boyd · Answer

Hi Parwez this seems like a network dns issue with your cluster

Christopher Boyd · Answer

read connection refused 1 53 seems like perhaps an ipv6 network connection that s failing a dns lookup

Christopher Boyd · Answer

You could try to curl <http docker io|docker io> just from some shell in one of your pods to confirm

Christopher Boyd · Answer

regarding fetching your image locally you can setup your own container image repository I believe every cloud has their own version or you can host one internally if you re using on prem

Christopher Boyd · Answer

What image tag are you using in your deployment file for your kubernetes jobs

Parwez Noori · Answer

Hi < Christopher Boyd> Thanks a lot for the answer I m able to curl and I have solved it by setting the image pull policy to Never to make it pull the image locally This works for now but will not when I try to setup CI CD I m using Azure but I m having issues with adding the container registry to the subnet Do you have any guidelines or recommendations raised hands

Christopher Boyd · Answer

<https docs microsoft com en us azure container registry container registry get started azure cli> I d just set up your container registry in the same resource group if you have control over it

Christopher Boyd · Answer

alternatively <https docs microsoft com en us azure container registry allow access trusted services>

Christopher Boyd · Answer

if your image pull policy is never it s not pulling the image it s just using your local cache

Parwez Noori · Answer

Yes I m able to move into the same resource group as the Kubernetes Service I m currently moving it Thanks Christopher raised hands Ahh makes much better sense because I don t have locally currently but it still fetches the image

Parwez Noori · Answer

Now I get this issue lt http azurecr io v2 prefect2 manifests latest| gt dial tcp lookup on 1 53 read udp 1 45437 gt 1 53 read connection refused Does it maybe takes some time before it works

Parwez Noori · Answer

I have also done this By default the allow trusted services setting is enabled in a new Azure container registry To disable or re enable the setting in the portal 1 In the portal navigate to your container registry 2 Under Settings select Networking 3 In Allow public network access select Selected networks or Disabled 4 Do one of the following To disable access by trusted services under Firewall exception uncheck Allow trusted Microsoft services to access this container registry To allow trusted services under Firewall exception check Allow trusted Microsoft services to access this container registry 5 Select Save

Parwez Noori · Answer

< Christopher Boyd> just wanted to mentioned that it has been resolved Once again thank you for your help raised hands

Christopher Boyd · Answer

Great to hear Parwez happy coding