kube-webhook-certgen Mirror to Docker Hub alternative

cross post from https://github.com/kubernetes/ingress-nginx/issues/6666

Now that Docker hub has a rate limit in place could it be considered offering a mirror of the images to for example gcr.io or quay,io? I was hit hard by this when installing ingress-nginx which uses your Docker images making the installation of the webhooks hang.

Thanks!

Dec 26 '20 15:12 meyskens

Was bit by this as well... we found alternative registries for all our images except this one.

Jan 03 '21 09:01 mcmcghee

Don't have any information on this right now. I will post an update here when I have some news.

Jan 20 '21 14:01 vsliouniaev

Would love to see this as well, was just bit by this.

Feb 02 '21 17:02 jammerful

+1 on this too. Looks like this is the only viable solution as if you even use a private registry mirror by overwriting the image/registry, if your private registry requires authentication it will fail as you need to patch the service account with the credentials from registry-creds. Only issue with that is, you cannot patch the service account until it exists and it only exists after the image is pulled 😅

Edit: mirror.gcr.io seems to work - not sure if there's rate limiting on this, though.

Aug 06 '21 14:08 riain0

@meyskens k8s.gcr.io/ingress-nginx/kube-webhook-certgen is now the upstream image I believe. Maybe we can close this issue then?

Feb 08 '22 09:02 invidian