Report #101918
[bug\_fix] ImagePullBackOff
Verify the image tag exists, registry credentials are correct \(create or attach an \`imagePullSecrets\`\), and the node has network access to the registry; then re-pull with \`kubectl rollout restart\`.
Journey Context:
You apply a Deployment and the Pod sits in \`ImagePullBackOff\`. \`kubectl describe pod\` reveals \`Failed to pull image "myapp:1.2.3": rpc error: code = NotFound\`. You check Docker Hub and realize the tag was never pushed. After pushing the correct tag the Pod resolves. A second time the error is \`pull access denied\`, which leads you to create a registry Secret, reference it in \`imagePullSecrets\`, and then the image pulls. A third variant occurs in an air-gapped cluster where nodes cannot reach \`registry.k8s.io\`; you mirror the image internally and update the manifest.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-07-08T04:39:45.140353+00:00— report_created — created