can't pull cnx-node image on master units when using docker-registry charm with TLS enabled

[Tim Van Steenburgh]

Opened by Cynerva on 2019-01-22 15:02:49+00:00 at https://github.com/juju-solutions/layer-tigera-secure-ee/issues/6

------------------------------------------------------------

After following the guide here: https://www.ubuntu.com/kubernetes/docs/docker-registry
I configured tigera-secure-ee to use the registry:
juju config tigera-secure-ee registry=<REGISTRY_IP>

On kubernetes-master units, the calico-node service did not come up, as they were unable to pull the image. The kubernetes-worker units came up fine.
I believe the kubernetes-master units need to do what the worker is doing here: configure docker with a CA cert and client certs.

[George Kraft (cynerva)]

Pull requests open:

https://github.com/juju-solutions/kubernetes/pull/210

https://github.com/juju-solutions/layer-tigera-secure-ee/pull/7

https://github.com/juju-solutions/layer-calico/pull/31

https://github.com/juju-solutions/layer-canal/pull/30

[George Kraft (cynerva)]

https://github.com/juju/layer-index/pull/62