Why can the image be successfully uploaded to the image repository when the application is released, but the access is denied when the task is to pull the image?

[fi-ecavc]

when pull task image，I got errors：
Events:
Type Reason Age From Message

---

Normal Scheduled 56s default-scheduler Successfully assigned kube-system/flink-cdc-datalake-5f9746c4f4-wt44z to dev13
Normal Pulling 21s (x3 over 56s) kubelet Pulling image "registry.cn-shenzhen.aliyuncs.com/streampark-flink/streamparkflinkjob-kube-system-flink-cdc-datalake"
Warning Failed 21s (x3 over 56s) kubelet Failed to pull image "registry.cn-shenzhen.aliyuncs.com/streampark-flink/streamparkflinkjob-kube-system-flink-cdc-datalake": rpc error: code = Unknown desc = failed to pull and unpack image "registry.cn-shenzhen.aliyuncs.com/streampark-flink/streamparkflinkjob-kube-system-flink-cdc-datalake:latest": failed to resolve reference "registry.cn-shenzhen.aliyuncs.com/streampark-flink/streamparkflinkjob-kube-system-flink-cdc-datalake:latest": pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed
Warning Failed 21s (x3 over 56s) kubelet Error: ErrImagePull
Normal BackOff 5s (x3 over 55s) kubelet Back-off pulling image "registry.cn-shenzhen.aliyuncs.com/streampark-flink/streamparkflinkjob-kube-system-flink-cdc-datalake"
Warning Failed 5s (x3 over 55s) kubelet Error: ImagePullBackOff

[fi-ecavc]

[fi-ecavc]

I have been executed :kubectl create secret docker-registry streamparksecret --docker-server=registry-vpc.cn-zhangjiakou.aliyuncs.com --docker-username=xxxxxx --docker-password=xxxxxx -n kube-system

[fi-ecavc]

our pod templete：
apiVersion: v1
kind: Pod
metadata:
namespace: kube-system
name: pod-template
spec:
serviceAccount: flink
hostAliases:
- ip: "192.168.0.3"
hostnames:
- "sss.pigsty"
containers:

• name: flink-main-container
  volumeMounts:
  • name: juicefs-sc-datalake-pv
    mountPath: /opt/flink/datalake
    volumes:
• name: juicefs-sc-datalake-pv
  persistentVolumeClaim:
  claimName: juicefs-sc-datalake-pvc

imagePullSecrets:

• name: streamparksecret

[fi-ecavc]

Since the system can push, it should be able to pull.

[fi-ecavc]

I also checked the user username and password, both are correct? Could it be that imagePullSecrets did not take effect due to a pod template format?