PowerProtect Data Manager：PowerProtect pod 部署失败，并显示错误“无法解析引用”和“x509：

Summary: PowerProtect Data Manager：PowerProtect pod 部署失败，并显示错误“无法解析引用”和“x509：证书由未知颁发机构签名的证书“（当使用本地注册表时） 由于无法从本地注册表中提取容器映像，PowerProtect 控制器 Pod 部署失败。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

当使用本地注册表托管容器映像时，发现后的 PowerProtect Pod 部署可能会失败。检查 pod 部署状态时，可能会发现类似于以下内容的错误消息：

事件：

  Type     Reason   Age                From     Message
  ----     ------   ----               ----     -------
  Normal   Pulling  27s (x3 over 63s)  kubelet  Pulling image "customresgistry.yourcompany.com:443/dellemc/powerprotect-k8s-controller:19.12.0-19"
  Warning  Failed   27s (x3 over 63s)  kubelet  Failed to pull image "customresgistry.yourcompany.com:443/dellemc/powerprotect-k8s-controller:19.12.0-19": rpc error: code = Unknown desc = failed to pull and unpack image "customresgistry.yourcompany.com:443/dellemc/powerprotect-k8s-controller:19.12.0-19": failed to resolve reference "customresgistry.yourcompany.com:443/dellemc/powerprotect-k8s-controller:19.12.0-19": failed to do request: Head "https://customresgistry.yourcompany.com:443/dellemc/powerprotect-k8s-controller/manifests/19.12.0-19__;" x509: certificate signed by unknown authority
  Warning  Failed   27s (x3 over 63s)  kubelet  Error: ErrImagePull
  Normal   BackOff  1s (x4 over 62s)   kubelet  Back-off pulling image "customresgistry.yourcompany.com:443/dellemc/powerprotect-k8s-controller:19.12.0-19"
  Warning  Failed   1s (x4 over 62s)   kubelet  Error: ImagePullBackOffcontroller/manifests/19.12.0-19__;" x509: certificate signed by unknown authority Warning Failed 27s (x3 over 63s) kubelet Error: ErrImagePull Normal BackOff 1s (x4 over 62s) kubelet Back-off pulling image "customresgistry.yourcompany.com:443/dellemc/powerprotect-k8s-controller:19.12.0-19" Warning Failed 1s (x4 over 62s) kubelet Error: ImagePullBackOff

Cause

映像在 PowerProtect Data Manager （PPDM） 查找它们的路径下不可用。

Resolution

在清除

k8s.docker.registry

参数用于指向映像的本地注册表，主机映像的路径必须与上存在的路径匹配。

https://hub.docker.com/registry

例如，对于 

dellemc/powerprotect-k8s-controller

本地注册表上的项目名称应为。

dellemc

存储库名称将为。 

powerprotect-k8s-controller


同样，《PowerProtect Data Manager Kubernetes 用户指南》的“将映像从 Docker Hub 提取到本地注册表”部分中提到的所有路径必须匹配。

增强请求 （RFE）“PPAS-I-767”通过产品管理部门提交，以允许本地注册表的自定义路径。如果您的站点想要与此 RFE 关联，请打开服务请求，并让您的支持代表将您的网站附加到增强请求中。 

Affected Products

PowerProtect Data Manager, PowerProtect Data Manager Essentials
Article Properties
Article Number: 000214992
Article Type: Solution
Last Modified: 28 Aug 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.