How to use an insecure docker registry

Support
1

I’m trying to install and use okteto, my images are stored in a private registry on artifactory. when i try to run okteto build or okteto deploy im encountering this error:

Error checking image at registry docker.artifactory..com/infra/roei-nginx:latest: error checking image at registry docker.artifactory..com/infra/roei-nginx:latest: error getting image tag with digest: error getting image digest: error getting image descriptor: Get "https://docker.artifactory..com/v2/": tcp dial failed for docker.artifactory..com:443: tls: failed to verify certificate: x509: certificate is valid for artifactory..com, not docker.artifactory..com

Unfortunately my artifactory is not running on https but http and in order to bypass on my server it I can just set docker.artifactory.****.com as an insecure registry at /etc/docker/daemon.json

How can I make okteto to skip the verification? or can I configure my registry as an insecure one?

2

@roeezaidler the URL of your registry doesn’t look right, you have two dots between “artifactory” and “com”, like if a word is missing, did you redact it or it was like this in the log?

  1. Could you share what okteto chart version are you using?
  2. Could you show are did you setup the private registry?

Thanks,
Andrea

3

Hi @andreafalzetti , the URL is docker.artifactory.companyname.com - i tried marking with aterisks but that just bolded the text. I can do docker pulls normally if i configure the daemon.json, but I need to get okteto to also use these same settings, to allow me to connect to an insecure registry.

This is the content of my /etc/docker/daemon.json:

{

“default-address-pools” : [
{
“base” : “10.10.0.0/16”,
“size” : 24
}
],
“registry-mirrors”: [“https ://docker.artifactory.companyname.com”],
“insecure-registries” : [“http ://docker.artifactory.companyname.com”],
“dns”: [“x.x.x.x”,“x.x.x.x”]
}

okteto version: 2.22.3