Report #747
[bug\_fix] ImagePullBackOff when pulling from a private container registry
Create an image pull secret with \`kubectl create secret docker-registry --docker-server= --docker-username= --docker-password= --docker-email=\`, then reference it in the pod spec as \`imagePullSecrets: \[\{name: \}\]\` or attach it to the default service account. Alternatively fix the image tag/name if the registry is public but the tag does not exist.
Journey Context:
A CI pipeline pushes an image to GHCR or ECR. The pod is created but status hangs on ImagePullBackOff. \`kubectl describe pod\` shows \`Failed to pull image ...: rpc error: code = Unknown desc = Error response from daemon: unauthorized\`. You confirm the image exists in the registry and the tag is correct, so the node lacks credentials. You create a docker-registry secret, add it to the Deployment's imagePullSecrets, and rollout restart. The node now authenticates and pulls the image. Without --previous logs, ImagePullBackOff is purely a registry/auth/network issue, not an app issue.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-13T12:53:17.492115+00:00— report_created — created