istio使用wasmplugin拉取镜像报错：cannot fetch Wasm module oci://10.120.1.233:8443/service-mesh/wasmdemo:v1.0?_cannot fetch wasm module docker pull-优快云博客

本文链接：https://blog.youkuaiyun.com/LONG_Yi_1994/article/details/145820232

wasmplugin.yaml

apiVersion: extensions.istio.io/v1alpha1
kind: WasmPlugin
metadata:
  name: httpbin-rate-limiting
  namespace: demo-bookinfo
spec:
  selector:
    matchLabels:
      app: details
  url: oci://10.120.1.233:8443/service-mesh/wasmdemo:v1.1

istio中使用wasmplugin后，istio-proxy容器拉取镜像报错：

2025-02-20T08:06:26.881605Z     info    xdsproxy        connected to upstream XDS server: istiod-1-19-6.istio-system.svc:15012
2025-02-20T08:06:27.081328Z     info    wasm    fetching image service-mesh/wasmdemo from registry 10.120.1.233:8443 with tag v1.0
2025-02-20T08:06:27.089022Z     error   wasm    convert the wasm config: 1 error occurred:
        * cannot fetch Wasm module oci://10.120.1.233:8443/service-mesh/wasmdemo:v1.0?insecure=true: could not fetch Wasm OCI image: could not fetch manifest: Get "https://10.120.1.233:8443/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority; GET http://10.120.1.233:8443/v2/: unexpected status code 400 Bad Request: <html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

出现这个问题是因为harbor的证书无法认证导致的。

修复方法

修改iop资源：