0

k3s ctr launches the contianerd CLI, and k3s crictl is the CRI cli. I'm told you configure k3s authentication to the image registries using /etc/rancher/k3s/registries.yaml. Does this yaml file configure containerd, and CRI such that these commands no longer require --creds?

k3s crictl pull     --creds "evancarroll:$TOKEN" docker.io/alpine:3
k3s ctr images pull --creds "evancarroll:$TOKEN" docker.io/library/alpine:3

And can just be

k3s crictl pull     docker.io/alpine:3
k3s ctr images pull docker.io/library/alpine:3

1 Answer 1

0

This is the answer I got from Rancher Developer Brandon D in their slack

ctr and crictl both interact with containerd, via different apis. ctr uses the containerd native api, and crictl uses the CRI api. The registries.yaml config is used by containerd itself, and will be honored no matter what it is that does the pull or how.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.