[ Kube 69 ] Using Private Docker Registry in Kubernetes

In this video, I will show you how to run a private Docker registry and how to use private docker registry in your Kubernetes cluster to pull images. You can run private Docker registry using Docker containers either using plain Http or can be secured using https. I will show you both the ways.
You can use pullImageSecrets option in your Kubernetes manifests to store access credentials for your private docker registry.

My Github repo:

Learn Kubernetes Playlist:

Hope you enjoyed this video. Please share it with your friends and don't forget to subscribe to my channel. For any questions/issues/feedback, please leave me a comment and I will get back to you at the earliest.

Thanks for watching.

If you wish to support me:

#learnkubernetes #justmekubernetes #dockerregistry #kubernetes

[peliusrex]

Awesome tutorial. Thanks for walking through common errors. Most tutorials just show the right way to do stuff without showing the common pitfalls.

[ulrichoke]

Very clear, All three scenarios covered simply in a short time. Interesting !

[taharbounsiar]

Hi Vankat, thanks for this great work, im learning a lot from your videos about k8s.

[FabioPedrazzoliGrazioli]

Great information, thanks! I like a lot your style, is like watching a live demo but ... on demand :D
I see you are very good with shells already, here are two things I feel sharing for the benefits of everyone reading:
CTRL+l (lower letter "L") works like typing the command "clear"
ALT+. pastes the last arg of the previous command line
All the best and keep up with the good work!
And, and almost forgot :) I loved the background at the beginning, Namaste brother _/\_ ; )

[leonardogodoi]

You helped me a lot! I was really struggling to create a registry. Thank you!

[sahaniarunitm]

your video once again helped me for solving insecure issue from registry.Great

[Pyrusmalus]

Thanks is not enough the ways to taught.. shukriya❤️

[zerobig]

Hello, my friend, Thank you for posting useful and informative content every time.
I have a question about the private container registry. Do you think it's better to build and use the container registry ourselves even in a sensitive customer service environment with some traffic and an increasing trend? For your information, we are planning to use Managed Kubernetes, but the container registry in the cloud is not allowed. Do you have any additional options or recommendations to consider in this situation?

[ylcnky]

Hi Venkat, today I finally completed the Kubernetes series in your playlist. Great great great thanks. Are you planning to cover deployment and usage of Kafka and Apache Spark with Kubernetes? If not can you please consider this as a request for future videos?

[dirbacke]

Thank you for your great tutorials.
I was wondering if you could help me with a tricky question. I followed one of you other tutorials to setup Jenkins using Helm. And now I would love for Jenkins to get the images from the Docker registry that I have setup using this tutorial. But all I get from Jenkins logs is "x509: certificate signed by unknown authority".
I have changed the openssl.cnf to contain
[alt_names]
IP = "172.x.x.x" # the IP address of my docker registry on a private cloud server.
What can I do to get the images to Jenkins using my private Docker registry?
I am grateful for any help.

Is daemon.json still required on workers when I use TLS certs for docker-registry in 2nd approach?
I just don't want to make this change on all worker hosts.

[gbrt]

Hi Venkat, slightly off topic, but what are you using for the that ghost shell completion? thats pretty cool !! is it something like 'powerline'?...also the status bar at the bottom of your screeen showing your IP etc, what is that?

[yamen]

Thank you for the tutorial..
I wonder why you didn't need to add the "domain.crt" file in your kubernetes cluster hosts!
How did the local private registry with an enabled TLS accept the connection without public key (the CRT file in this case)? Could it be because the docker was still configure to accept your registry as insecure, therefore the TLS was bypassed?

I have a k8s cluster created by kubeadm and I'm not able to pull images through kubectl while I can through docker. The error "x509: certificate signed by unknown authority" haunts me down when I create a pod, eventhough I have everything configured properly with the CRTs added.

[dfytq]

Thanks man. can we expose this local registry as https using nginx? if yes than how? or what is the best way to expose it as https service so that other kubernetes cluster can access it over the internet as a secured registry?

[konstantinosraftopoulos]

I created the docker registry in my kubernetes master vm. I followed all the steps that you described i your video and more important i filled in my worker node vm in the /etc/docker/daemon.json the "insecure-registries": ["ip_of_master_node" : 5000] but the error http: server gave HTTP response to HTTPS client continue to appear. :/

**Should i fill also the daemon.json file woth the "insecure-registries"?

[Youdude]

can you do a video on harbor for registry?

[TheJrocksk]

Hello,
What does the curly braces represent in the end of the yaml file? And how does it relate with the path in the local host?
Here is a part of the JSON code.


....

volumes:
-


volumes:
docker-registry-data: {}

[iknownothing]

Hello, two question, followed the video and all was success.
The first issue is when trying to building/tagging and pushing an image from local computer to private registry on the server (linode) - i get no errors (all seems to work fine), but I cannot see the images (I am logged in via docker login etc.)

[abhijeetsamanta]

H I Venkat, Thanks for this awesome tutorial which I was looking, however If possible you help me how I can make the docker image in private of Node.js based backed and use in k8s as pods?

[harshgoyal]

Very clear and simple way to explain things. Can you pls let me know is there any platform when i can practice this stuff like production level? Because right now i am working in QA and i dont have exposure to devops. But i want to get into Kubernetes and Devops