Intermittent "TLS Handshake Timeout" while pulling images from Internal OpenShift registry

Solution Verified - Updated -

Issue

When pulling images from the OpenShift internal registry, sometimes a TLS Handshake Timeout error happens. For example:

00:00:00 AM     Warning               Failed    Error: ImagePullBackOff
00:00:00 AM     Normal Back-off               Back-off pulling image "docker-registry.default.svc:5000/project/image..."
00:01:16 AM     Warning               Failed    Failed to pull image "docker-registry.default.svc:5000/project/image...": rpc error: code = Unknown desc = Get https://docker-registry.default.svc:5000/v2/: net/http: TLS handshake timeout
00:01:16 AM     Warning               Failed    Error: ErrImagePull

When OpenShift retries to pull the image, it works. It's occasional and intermittent.

Environment

  • Red Hat OpenShift Container Platform (OCP) 3.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content