Cannot pull image from secured private registry

I added the registry to /var/snap/microk8s/current/args/containerd-template.toml as follows

      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.my.domain"]
        endpoint = ["https://docker.my.domain"]

But it couldn’t resolve. So I changed the endpoint to use the IP.

      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.my.domain"]
        endpoint = ["https://#.#.#.#"]

There was an error with the cert where the IP address was not listed in the SANs - so I re-issued the cert with the IP address in the SANs. Went back to not resolving. Keep in mind, I can successfully pull the image specified using docker pull.

    [plugins."io.containerd.grpc.v1.cri".registry.configs]
      [plugins."io.containerd.grpc.v1.cri".registry.configs."docker.my.domain"]
        [plugins."io.containerd.grpc.v1.cri".registry.configs."docker.my.domain".tls]
          insecure_skip_verify = true

I even tried specifying the CA certificate as the path on the host, no change.

What am I missing?

[dajester2013]

Updating to Nexus 3.27 corrected the issue, I was able to pull the image successfully. Thank you!

[dajester2013]

Did u try it with a newer version of nexus?

Not yet - I’m researching it now, apparently it’s an issue with the registry server not responding to HEAD requests, which I can verify outside of microk8s. I’ll keep you updated, but for now this issue can be closed.