search

hcloud-talos / terraform-hcloud-talos

This repository contains a Terraform module for creating a Kubernetes cluster with Talos in the Hetzner Cloud.
https://registry.terraform.io/modules/hcloud-talos/talos
MIT License
61 stars 15 forks source link

Add docs for 403 forbidden on gcr.io pull #46

Closed mrclrchtr closed 4 weeks ago

mrclrchtr commented 1 month ago

image

It's because of blacklisted IP.

https://github.com/kubernetes/registry.k8s.io/issues/138

DennisJensen95 commented 1 month ago

Any workaround for this? I tried installing spegel, but i did not manage to make it work 😊

mrclrchtr commented 4 weeks ago

Hi,

Unfortunately no... a Docker proxy would help. Spegel is unfortunately “too late” in the chain for it to help. I have been in contact with support. Here is the communication:

Hetzner

Unfortunately, some of our IPs are incorrectly located in Iran by some GeoIP databases. We cannot influence these databases. If this causes problems, please create a snapshot and create a new server with this snapshot. You can then delete the “faulty” server.

Me

I work with Terraform and therefore probably get the same IP again and again. Even when completely deleting and recreating.

Hetzner

Unfortunately, the IP assignment is random and cannot be influenced by us. However, if the current server is deleted after a new server has been created, it should be assigned a different IP address.

conrity commented 1 week ago

Install Harbor and use it as proxy for docker image registries. Talos supports Harbor. Worked for me.

mrclrchtr commented 1 week ago

You mean install Harbour somewhere else?

conrity commented 1 week ago

You mean install Harbour somewhere else?

Yes, separate server in hetzner cloud, with "good" ip address. Use harbor robot token in talos registries configuration.