did not handle privatelink acr well

Azure / aks-canipull

Diagnostic tool to perform health check on AKS for image pulls.

MIT License

5 stars 7 forks source link

did not handle privatelink acr well #6

Open wenwu449 opened 3 years ago

wenwu449 commented 3 years ago

when testing against private endpoint ACR https://docs.microsoft.com/en-us/azure/container-registry/container-registry-private-link

have following output: Canonical name for ACR (abc.azurecr.io): abc.privatelink.azurecr.io. [2021-01-28T17:09:44Z] ACR location: privatelink ACR location 'privatelink' does not match your cluster location 'eastus2'. This may result in slow image pulls and extra cost.

nathana1 commented 3 years ago

Also consider adding more dns verifications for privatelink when detected:

private dns is used
data endpoint is enabled
ip addresses for data endpoint and registry endpoint are different
docker login/pull succeeds