小亿 发布的文章

问题现象

当使用私有 registry 的 image 作为 ClusterServingRuntime 时,启动 knative-serving revision 后,会出现以下错误,导致内网私有 registry 的证书不被信任,无法启动 kserve InferenceService 。困扰了我好久好久。

Unable to fetch image "hub.yiqisoft.cn/openvino/model_server:latest-gpu": failed to resolve image to digest: Get "https://hub.yiqisoft.cn/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority

尝试方法

将私有 registry 证书导入

虽然手动拉取 image 没问题,但是 knative-serving 还是 无效

终极方法,还是在 GitHub issue 找到

issue: https://github.com/knative/serving/issues/5126

需要修改 ConfigMaps , knative-serving namespace 下 config-deployment,增加一个 key/value

registries-skipping-tag-resolving: kind.local,ko.local,dev.local,hub.yiqisoft.cn