## Summary Attempts to install Helm charts for Harbor and Zookeeper fail with ErrImagePull ## Steps to reproduce Simply follow the directions in README.md. Run the 'helm install' as described. ## What is the current bug behavior? Install fails with ErrImagePull. The pull attempt results in a HTTPS 401 error. ## What is the expected correct behavior? Helm able to successfully pull the container image from Iron Bank ## Relevant logs and/or screenshots ''' This is from 'kubectl describe pod <podname>: Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 34s default-scheduler Successfully assigned default/chart-1628889778-zookeeper-0 to k8s-node1 Normal Pulling 19s (x2 over 34s) kubelet Pulling image "registry1.dsop.io/ironbank/opensource/apache/zookeeper:3.6.2" Warning Failed 19s (x2 over 34s) kubelet Failed to pull image "registry1.dsop.io/ironbank/opensource/apache/zookeeper:3.6.2": rpc error: code = Unknown desc = failed to pull and unpack image "registry1.dsop.io/ironbank/opensource/apache/zookeeper:3.6.2": failed to resolve reference "registry1.dsop.io/ironbank/opensource/apache/zookeeper:3.6.2": unexpected status code [manifests 3.6.2]: 401 Unauthorized Warning Failed 19s (x2 over 34s) kubelet Error: ErrImagePull Normal BackOff 4s (x2 over 33s) kubelet Back-off pulling image "registry1.dsop.io/ironbank/opensource/apache/zookeeper:3.6.2" Warning Failed 4s (x2 over 33s) kubelet Error: ImagePullBackOff ''' Note that a 'docker pull registry1.dsop.io/ironbank/opensource/apache/zookeeper:3.6.2' works just fine on both my control node and worker node, so I know that at least docker authentication is working. I tried pointing Helm to ~/.docker/config.json but that did not help. I have also tried supplying credentials on the Helm command line, but the result is the same. I have so far not found any documentation on how Helm should authenticate with IB, assuming it is different than how docker does it. Update 8/15/21: Determined that kubectl has the same issue when 'apply' or 'create deployment' is tried. I tried the steps on this page https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ but none of those things helps at all. Same 401 error. Update 8/16/21: Kubectl needs to have a secret created that encodes the IB credentials. Once I did that, working better. Issue closed. ## Possible fixes (If you can, link to the line of code that might be responsible for the problem) ## Defintion of Done - [ ] Bug has been identified and corrected within the container /cc @ironbank-notifications/bug