Kubernetes Image Pull Failure from JFrog Registry: "Connection Reset by Peer"

Question

Kubernetes Image Pull Failure from JFrog Registry: "Connection Reset by Peer"

Srikanth Mannepalli 0

Hello Team,

I am encountering an issue while pulling an image from JFrog Registry into a Azure Kubernetes pod. The error message reads:

Failed to pull image "artifact.chi.com/gpm0001713-dkr-wfe-da-stage/Ga.chi.wfe.da/ghmadapter:2.4.09": failed to do request: Head "https://artifact.chi.com/v2/gmp008643: read tcp 101.1.0.107:42086->101.6.0.9:443: read: connection reset by peer

******@chi.comTroubleshooting Steps Taken ******@chi.com

So far, I have attempted the following troubleshooting steps:

******@chi.com Validated JFrog Registry Connection ******@chi.com
- Used curl to verify connectivity: curl -v -u <JFROG_USERNAME>:<JFROG_API_KEY> https://<JFROG_REGISTRY_URL>/v2/
- Response indicates the connection was successful.
******@chi.com Checked Registry Authentication ******@chi.com
- Logged into JFrog Registry via Docker: docker login <JFROG_REGISTRY_URL> -u <JFROG_USERNAME> -p <JFROG_API_KEY>
- Authentication was successful.
******@chi.com Updated Kubernetes Secrets and Deployment Configuration ******@chi.com
- Created a Docker Registry secret: kubectl create secret docker-registry regcred --docker-server=<your-registry-server> --docker-username=<your-name> --docker-password=<your-pword> --docker-email=<your-email>
- Updated the deployment YAML to reference the secret under imagePullSecrets.
******@chi.com Checked Kubernetes Logs ******@chi.com
- Pod logs consistently show: Warning Failed kubelet Failed to pull image: read tcp <source-IP>:<port> -> <destination-IP>:443: read: connection reset by peer Warning ImagePullBackOff kubelet Backing off pulling image

******@chi.com Question ******@chi.com

Even after performing the above troubleshooting steps, I am still encountering the "connection reset by peer" error. What additional steps can I take to resolve this issue?

I would really appreciate any help from anyone who has faced a similar issue.

Thanks in advance.

Mounika Reddy Anumandla 5,220 Reputation points Microsoft External Staff Moderator

2025-05-08T15:01:28.9133333+00:00
Hi Srikanth Mannepalli,

The Microsoft document also states that if you need to pull an image from a private external registry, use an **image pull secret**and I understand that this issue is not related to your Kubernetes secret or authentication, since the error is not an auth failure. It's happening during the network transfer — specifically, when the Kubernetes node tries to make a secure HTTPS (port 443) connection to JFrog, the JFrog server or a middlebox is forcefully closing the connection.

Deploy a Test Pod to Simulate Node Behaviour. Please check connectivity from inside the cluster, not from your laptop. Run the following command to create a Netshoot pod or apply the below YAML defnition:

kubectl run netshoot --image nicolaka/netshoot

apiVersion: v1 kind: Pod metadata: name: netshoot spec: containers: - name: netshoot image: nicolaka/netshoot command: ["sleep", "3600"] restartPolicy: Never

Apply it: kubectl apply -f netshoot.yaml

Then run:
kubectl exec -it netshoot -- bash

From inside the pod:

curl -v -u <JFROG_USERNAME>:<JFROG_API_KEY> https://artifact.chi.com/v2/ openssl s_client -connect artifact.chi.com:443

If either of those commands fails or hangs, then:

Your AKS subnet or public egress IP is blocked at the JFrog side.
From inside the pod: Run curl ifconfig.me

Then ask JFrog admin or network team if this IP address is allowed to access artifact.chi.com over HTTPS

A firewall, proxy, or deep packet inspection device is interfering with TLS.
If you are using an Azure Firewall or NAT Gateway, they could cause this issue.

Ensure outbound rules allow TCP:443 to artifact.chi.com.

Check the Connection Monitor in Azure Network Watcher.

If the issue still persists, check with your JFrog team to:

Check access logs around the failure time.

Review any rules or rate limits that might reset connections.

Ref : https://jfrog.com/blog/pulling-all-your-kubernetes-cluster-images-from-a-private-artifactory-registry/

https://learn.microsoft.com/en-us/answers/questions/653640/kubernetes-(in-aks)-error-while-pulling-image-from

Hope it helps!

Let me know if you have any further queries!

If the comment is helpful, please click "upvote" to let us know!
Mounika Reddy Anumandla 5,220 Reputation points Microsoft External Staff Moderator

2025-05-09T14:28:09.0966667+00:00

Hi Srikanth Mannepalli,

Just checking in to see if you had a chance to review the response provided to your question.

Let me know if you have any further queries!

If the information is helpful, please click "upvote" to let us know.
Srikanth Mannepalli 0 Reputation points

2025-05-12T05:23:44.59+00:00

Hi @Mounika Reddy Anumandla

Thanks for your assistance with this issue. I'm currently working through the steps you've provided and will update you here once I’ve completed them.
Mounika Reddy Anumandla 5,220 Reputation points Microsoft External Staff Moderator

2025-05-12T16:02:16.4033333+00:00

Hi Srikanth Mannepalli,

Please feel free to tag me in the comments for any issues!

Your answer

Mounika Reddy Anumandla 5,220 Reputation points Microsoft External Staff Moderator

2025-05-09T14:28:09.0966667+00:00

Hi Srikanth Mannepalli,

Just checking in to see if you had a chance to review the response provided to your question.

Let me know if you have any further queries!

If the information is helpful, please click "upvote" to let us know.
Srikanth Mannepalli 0 Reputation points

2025-05-12T05:23:44.59+00:00

Hi @Mounika Reddy Anumandla

Thanks for your assistance with this issue. I'm currently working through the steps you've provided and will update you here once I’ve completed them.
Mounika Reddy Anumandla 5,220 Reputation points Microsoft External Staff Moderator

2025-05-12T16:02:16.4033333+00:00

Hi Srikanth Mannepalli,

Please feel free to tag me in the comments for any issues!

Share via

Kubernetes Image Pull Failure from JFrog Registry: "Connection Reset by Peer"

Your answer