kubernetes创建的pod如何从私有镜像仓库拉取镜像

# kubectl create secret docker-registry myregistrykey --docker-server=DOCKER_REGISTRY_SERVER --docker-username=DOCKER_USER --docker-password=DOCKER_PASSWORD --docker-email=DOCKER_EMAIL

kubectl -n k8s-ecoysystem-apps create secret docker-registry registry-key --docker-server=registry.test.com --docker-username=admin --docker-password=admin123 --docker-email=12563478@qq.com

[root@node ~]# docker login registry.test.com
Username: admin
Password:
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

# cat ~/.docker/config.json | base64

cat myregistrykey.yaml
apiVersion: v1
kind: Secret
metadata:
  name: myregistrykey
data:
  .dockerconfigjson: UmVhbGx5IHJlYWxseSByZWVlZWVlZWVlZWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGxsbGx5eXl5eXl5eXl5eXl5eXl5eXl5eSBsbGxsbGxsbGxsbGxsbG9vb29vb29vb29vb29vb29vb29vb29vb29vb25ubm5ubm5ubm5ubm5ubm5ubm5ubm5ubmdnZ2dnZ2dnZ2dnZ2dnZ2dnZ2cgYXV0aCBrZXlzCg==
type: kubernetes.io/dockerconfigjson

# kubectl apply -f myregistrykey.yaml

# cat nginx-pod.yaml
apiVersion: v1
kind: Pod
metadata:
  name: tomcat
spec:
  containers:
  - name: tomcat-c
    image: tomcat
  imagePullSecrets:
  - name: myregistrykey
# kubectl apply -f nginx-pod.yaml

# cat nginx-deploy.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx
spec:
  selector:
    matchLabels:
      app: nginx
  replicas: 2
  template:
    metedata:
      name: nginx
      labels:
        app: nginx
    spec:
      imagePullSecrets:
      - name: myregistrykey
      containers:
      - name: nginx-c
        image: nginx
        imagePullPolicy: Always
# kubectl apply -f nginx-deploy.yaml