title: Failed to pull image myapidemodocker.azurecr.io/apidemo:v4.0: rpc error: code = Unknown desc = unknown blob
body: <p>Any idea why I keep getting this annoying and unhelpful error code/description?</p>
  
  <pre><code>Failed to pull image myapidemodocker.azurecr.io/apidemo:v4.0: rpc error: code = Unknown desc = unknown blob
  </code></pre>
  
  <p>I thought of incorrect secret and followed this documentation from Microsoft with no success! [<a href="https://docs.microsoft.com/en-us/azure/container-registry/container-registry-auth-aks][1]" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/container-registry/container-registry-auth-aks][1]</a>.</p>
  
  <p>Context:</p>
  
  <ul>
  <li>I am using Visual Studio with Docker for Windows to create Windows
  Container image.</li>
  <li>Image is pushed to Azure Container Register (ACR) and Deployed as
  Azure Container Instance. Unfortunately, I can't use ACI as
  production application because it is not connected to a private vNET.
  Can't use public IP for security reason but that's what is done just
  for poc!</li>
  <li>Next step, Created Kubernetes cluster in Azure and trying to deploy
  the same image (Windows container) into Kubernetes POD but it is not
  working.</li>
  <li>Let me share my yml definition and event logs</li>
  </ul>
  
  <p>Here is my yml definition:</p>
  
  <pre><code>apiVersion: apps/v1beta1
  kind: Deployment
  metadata:
    name: apidemo
  spec:
    template:
      metadata:
        labels:
          app: apidemo
      spec:
        containers:
        - name: apidemo
          image: myapidemodocker.azurecr.io/apidemo:v4.0
        imagePullSecrets:
        - name: myapidemosecret
        nodeSelector:
         beta.kubernetes.io/os: windows
  
  
  Event logs:
  Events:
    Type     Reason                 Age               From                               Message
    ----     ------                 ----              ----                               -------
    Normal   Scheduled              4m                default-scheduler                  Successfully assigned apidemo-57b5fc58fb-zxk86 to aks-agentp
  ool-18170390-1
    Normal   SuccessfulMountVolume  4m                kubelet, aks-agentpool-18170390-1  MountVolume.SetUp succeeded for volume "default-token-gsjhl"
    Normal   SandboxChanged         2m                kubelet, aks-agentpool-18170390-1  Pod sandbox changed, it will be killed and re-created.
    Normal   Pulling                2m (x2 over 4m)   kubelet, aks-agentpool-18170390-1  pulling image "apidemodocker.azurecr.io/apidemo:v4.0"
    Warning  Failed                 20s (x2 over 2m)  kubelet, aks-agentpool-18170390-1  Failed to pull image "apidemodocker.azurecr.io/apidemo:v4
  .0": [rpc error: code = Unknown desc = unknown blob, rpc error: code = Unknown desc = unknown blob]
    Warning  Failed                 20s (x2 over 2m)  kubelet, aks-agentpool-18170390-1  Error: ErrImagePull
    Normal   BackOff                10s               kubelet, aks-agentpool-18170390-1  Back-off pulling image "apidemodocker.azurecr.io/apidemo:
  v4.0"
    Warning  Failed                 10s               kubelet, aks-agentpool-18170390-1  Error: ImagePullBackOff
  </code></pre>
  
  <p>(5) I don't understand why Kubernetes is still using <code>/var/run/secrets/kubernetes.io/serviceaccount</code> from <code>default-token-gsjhl</code> as secrete  while I specified my own!</p>
  
  <p>Thanks for taking time to provide feedback.</p>