OpenShift - Docker Rate Limit and Regular Pulls

Johnny Sheppard

11/21/23, 8:53 AM

I am learning how to use OpenShift but I have a problem with my cluster that I haven't found an answer to.

Every hour one of the nodes from the cluster makes about 8 pull requests to Docker Hub. I can't work out why or how to stop it.

The other issue is, it's making these pull requests anonymously and affecting the office Docker Hub Rate Limit. I've added account details to the pull-secret secret that's in the openshift-config namespace, but it doesn't seem to have made a difference to these regular hourly pulls from Docker Hub.

The pull-secret is taking effect on other projects I create, so I know it is doing something.

Does anyone know how to track down these hourly pulls, and also make them use the Docker Hub details too?

For what it's worth, I am using OKD 4.11.0-0.okd-2022-11-05-030711 for my cluster version. I installed it on a set of Proxmox VMs in our office network using these instructions: https://docs.okd.io/latest/installing/installing_platform_agnostic/installing-platform-agnostic.html

I have tried adding the Docker Hub details to the pull secret in the install-config.yaml file that's used to set up the cluster, but the installation still seemed to pull from docker hub anonymously for many of the components it got from Docker Hub.

I should also mention, I know that it's the cluster that's making these anonymous pulls from Docker Hub because I set up a firewall rule on the office router to log traffic to Docker Hub. I've also tried blocking traffic from the cluster to Docker Hub (just as a test) and the Rate Limit started going back up to 100 available pulls, over the subsequent hours that passed.

125

0 + 1

kubernetes

docker-registry

openshift-4

openshift

SYN

11/21/23, 1:56 PM

I would look for containers in imagePullBackoff, or which are restarting from time to time, which would trigger such accesses to your registry. Also keep in mind that installing a pull secret would not affect existing Pods: they should be deleted / re-created. While ultimately, since you're using OpenShift, you should consider syncing those images using ImageStreams.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: OpenShift - Docker Rate Limit and Regular Pulls

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.