跳过 Knative-serving revision 针对私有 registry 证书认证问题
问题现象
当使用私有 registry 的 image 作为 ClusterServingRuntime
时,启动 knative-serving revision 后,会出现以下错误,导致内网私有 registry 的证书不被信任,无法启动 kserve InferenceService 。困扰了我好久好久。
Unable to fetch image "hub.yiqisoft.cn/openvino/model_server:latest-gpu": failed to resolve image to digest: Get "https://hub.yiqisoft.cn/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority
尝试方法
将私有 registry 证书导入
虽然手动拉取 image 没问题,但是 knative-serving 还是 无效
终极方法,还是在 GitHub issue 找到
issue: https://github.com/knative/serving/issues/5126
需要修改 ConfigMaps , knative-serving namespace 下 config-deployment,增加一个 key/value
registries-skipping-tag-resolving: kind.local,ko.local,dev.local,hub.yiqisoft.cn