# Update Registry

**URL:** <https://forums.suse.com/t/update-registry/38204>\
**Category:** SUSE Rancher Prime\
**Created:** [June 17, 2022, 3:41pm UTC](https://forums.suse.com/t/update-registry/38204 "2022-06-17T15:41:14Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![aevenot](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/aevenot/32/9123_2.png) [@aevenot](https://forums.suse.com/u/aevenot)\
**Post date:** [June 17, 2022, 3:41pm UTC](https://forums.suse.com/t/update-registry/38204/1 "2022-06-17T15:41:14Z")

</div>

I have a Rancher installed in version 2.4.7 and I just upgrade it in 2.6.3 (in a lab environnement at first).

We have also have a new registry, to replace the docker registry used since before.

After the upgrade some clusters didn’t come up because of ‘ImagePullBackOfff’ issue. I have tried to patch the pods, it’s working some seconds and the cluster get back to the old registry.

So my question is, how to configure the cluster to use the new registry ?

---

<div class="post-metadata">

**Author:** ![aemneina](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/aemneina/32/1323_2.png) [@aemneina](https://forums.suse.com/u/aemneina)\
**Post date:** [June 17, 2022, 3:52pm UTC](https://forums.suse.com/t/update-registry/38204/2 "2022-06-17T15:52:46Z")

</div>

Which components or pods are failing due to the ImagePullBackoff? You might need to update the cluster level or global default registries and ensure the images are present there.

---

<div class="post-metadata">

**Author:** ![aevenot](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/aevenot/32/9123_2.png) [@aevenot](https://forums.suse.com/u/aevenot)\
**Post date:** [June 20, 2022, 2:09pm UTC](https://forums.suse.com/t/update-registry/38204/3 "2022-06-20T14:09:22Z")

</div>

Here is the pods witht the status ImagePullBackOff.

- cattle-cluster-agent
- cattle-node-agent
- kube-api-auth

I have finally fix the cluster by patching directly the pods and not the deployment or daemonset. Now the cluster is up.

I have reconfigured the registry in the cluster.yaml to set the new registry first with is\_default: true followed by the old registry with is\_default: false.

Now everything it’s ok.

Now I tried to upgrade my cluster but I have the following error in the Rancher UI  
[Error response from daemon: unauthorized: The client does not have permission for manifest]

I don’t know which image Rancher is trying to pull and why it’s doesn’t work?

---

<div class="post-metadata">

**Author:** ![aevenot](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/aevenot/32/9123_2.png) [@aevenot](https://forums.suse.com/u/aevenot)\
**Post date:** [June 27, 2022, 7:14am UTC](https://forums.suse.com/t/update-registry/38204/4 "2022-06-27T07:14:18Z")

</div>

I finaly figured out what it’s going wrong.

The new registry needs to be in the first with is\_default: true followed by the oldregistrry 'juste in case the cluster try to pull images form the old one)

private\_registries:  
- ecr\_credential\_plugin: {}  
is\_default: true  
url: ‘’  
user: xxx  
password: xxx  
- ecr\_credential\_plugin: {}  
is\_default: false  
url: ‘’  
user: xxx  
password: xxx