Replace harbor.fireflylab.local (external DNS, not resolvable from pods) with harbor-core.harbor.svc.cluster.local (internal ClusterIP, always resolvable). DinD insecure-registry flag allows HTTP to the internal service. values.yaml image.repository stays as harbor.fireflylab.local so kubelet pulls via the external hostname (same image, different access path).
3.7 KiB
3.7 KiB