云容器引擎 CCE-工作负载异常：实例拉取镜像失败:排查思路
下载云容器引擎 CCE用户手册完整版
排查思路
根据具体事件信息确定具体问题原因，如表1所示。
事件信息 |
问题原因与解决方案 |
|---|---|
Failed to pull image "xxx": rpc error: code = Unknown desc = Error response from daemon: Get xxx: denied: You may not login yet |
没有登录镜像仓库，无法拉取镜像。 排查项一：kubectl创建工作负载时未指定imagePullSecret |
Failed to pull image "nginx:v1.1": rpc error: code = Unknown desc = Error response from daemon: Get https://registry-1.docker.io/v2/: dial tcp: lookup registry-1.docker.io: no such host |
镜像地址配置有误找不到镜像导致失败。 排查项二：填写的镜像地址错误（使用第三方镜像时） 排查项三：使用错误的密钥（使用第三方镜像时） |
Failed create pod sandbox: rpc error: code = Unknown desc = failed to create a sandbox for pod "nginx-6dc48bf8b6-l8xrw": Error response from daemon: mkdir xxxxx: no space left on device |
磁盘空间不足。 排查项四：节点磁盘空间不足 |
Failed to pull image "xxx": rpc error: code = Unknown desc = error pulling image configuration: xxx x509: certificate signed by unknown authority |
从第三方仓库下载镜像时，第三方仓库使用了非知名或者不安全的证书. 排查项五： 远程镜像仓库使用非知名或不安全的证书 |
Failed to pull image "XXX": rpc error: code = Unknown desc = context canceled |
镜像体积过大。 排查项六： 镜像过大导致失败 |
Failed to pull image "docker.io/bitnami/nginx:1.22.0-debian-11-r3": rpc error: code = Unknown desc = Error response from daemon: Get https://registry-1.docker.io/v2/: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers) |
排查项七：无法连接镜像仓库 |
ERROR: toomanyrequests: Too Many Requests. 或 you have reached your pull rate limit, you may increase the limit by authenticating an upgrading |
由于拉取镜像次数达到上限而被限速。 排查项八：拉取公共镜像达上限 |
