[CLARIFICATION REQUIRED] Issues with pulling private docker images from dockerhub

[dodalovic]

Hi, thanks for the tool, first of all.
I'm trying to configure k3s to pull docker images from the docker hub.

I saw some examples, where one can just create something like this:

and then one can mount such secret into pod, and the images should be pulled.

On the other side, I see https://rancher.com/docs/k3s/latest/en/installation/private-registry/ where it says I need to create some file... I'm confused.

Thanks

[brandond]

The first thing you're looking at is called Image Pull Secrets. If the image is on a registry that requires authentication, you can store the credentials in a secret, and reference the secret from the pod, to use them when pulling the image.
https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/

If you want to provide credentials at a container runtime level (without having to configure each and every pod), or if you want to configure a system-level registry mirror, then use the k3s private registry configuration.

[dodalovic]

Hi, @brandond, first of thanks that you have time for this question at all.

Suppose I want to use this system level setup, and I want to pull my private images from docker hub:

Do I need something like:

cat /etc/rancher/k3s/registries.yaml
mirrors:
  docker.io:
    endpoint:
      - "https://myreg.com:5000"
configs:
  "myreg.com:5000":
    auth:
      username: my-username
      password: my-password

And then just refernce my images normally in the helm template, dodalovic/whatever:latest or ?