magitekbay 破案了，刚看了2.0kk的源码，这个config写在了源码里，每次都会更新，我去更新一下源码就行

      Alice : 嗯，不客气，kk部署比较省事，3.0的时候用过，但是不怎么符合我的场景，我就自己手动部署了，就是每次升级都得自己改镜像，签证书的是一个二级ca，ks-installer不支持就很头疼

        Alice
        k3s的话，kk没有去装容器运行时。然后是k3s会自己装containerd，使用命令是k3s ctr xxx。
        看你的报错应该是需要配置走http去上传镜像到私有镜像仓库，可以试试这样配置：

        registry:
    registryMirrors: []
    insecureRegistries: []
    privateRegistry: "192.168.5.61:1080"
    planHTTP: true

            24sama 恩我现在是设置了http，配置不生效，我试试用新版的kk我看有pr修复这个问题了

              改了v2.2.1的版本仍然不行
              Warning FailedCreatePodSandBox 0s (x5 over 49s) kubelet, node1 Failed to create pod sandbox: rpc error: code = Unknown desc = failed to get sandbox image "192.168.5.61:1080/kubesphere/pause:3.2": failed to pull image "192.168.5.61:1080/kubesphere/pause:3.2": failed to pull and unpack image "192.168.5.61:1080/kubesphere/pause:3.2": failed to resolve reference "192.168.5.61:1080/kubesphere/pause:3.2": failed to do request: Head https://192.168.5.61:1080/v2/kubesphere/pause/manifests/3.2: http: server gave HTTP response to HTTPS client

                config.yaml
                registry:

                privateRegistry: "192.168.5.61:1080"

namespaceOverride: ""

registryMirrors: []

insecureRegistries: [192.168.5.61:1080]

auths: # if docker add by \`docker login\`, if containerd append to \`/etc/containerd/config.toml\`

  "192.168.5.61:1080":

    username: "admin"

    password: "Harbor12345"

    skipTLSVerify: false # Allow contacting registries over HTTPS with failed TLS verification.

    plainHTTP: true # Allow contacting registries over HTTP.

                addons: []

                24sama 这个我确实设置了。。。还是不生效，就很离谱，我去github问问社区的人

                  24sama
                  [plugins.opt]

                  path = "/var/lib/rancher/k3s/agent/containerd"

                  [plugins.cri]

                  stream_server_address = "127.0.0.1"

                  stream_server_port = "10010"

                  enable_selinux = false

                  sandbox_image = "192.168.5.61:1080/kubesphere/pause:3.2"

                  [plugins.cri.containerd.runtimes.runc]

                  runtime_type = "io.containerd.runc.v2"

                  [plugins.cri.registry.mirrors]

                  [plugins.cri.registry.mirrors."192.168.5.61:1080"]

                  endpoint = ["http://192.168.5.61:1080"]

                  [plugins.cri.registry.configs."192.168.5.61:1080".auth]

                  username = "admin"

                  password = "Harbor12345"