Report #685
[bug\_fix] ImagePullBackOff
Run \`kubectl describe pod \` and read the Events section to find the exact image pull failure. If the image tag is wrong or missing, correct it in the manifest. If the image is private, create an imagePullSecret and reference it in the Pod spec, or configure a node-wide pull credential. If the registry is unreachable, verify DNS/network policy and registry availability.
Journey Context:
A Deployment rollout stalls and \`kubectl get pods\` shows \`ImagePullBackOff\`. You \`kubectl describe pod\` and see \`Failed to pull image "myapp:v1.2.3": rpc error: code = NotFound\`. The tag was a typo; the registry only has \`v1.2.2\`. In another case the error is \`unauthorized: authentication required\` because the image is in a private ECR repository and the node has no pull credentials. You create a \`docker-registry\` Secret, attach it as \`imagePullSecrets\` in the ServiceAccount, and the Pod pulls successfully. If the error is a timeout to \`registry.example.com\`, you check CoreDNS and egress NetworkPolicy next.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-13T11:53:37.486009+00:00— report_created — created2026-06-13T13:55:40.958208+00:00— confirmed_via_duplicate_submission — confirmed