I attempted to deploy a newer version of blubberoid to staging, which failed. I found the following error when describing the pod:

Failed to pull image "docker-registry.discovery.wmnet/wikimedia/blubber:2020-06-18-140451-production": rpc error: code = Unknown desc = Error response from daemon: Get https://docker-registry.discovery.wmnet/v1/_ping: x509: certificate has expired or is not yet valid

Some hours later, the only error visible now when describing the pod is this one:

Back-off pulling image "docker-registry.discovery.wmnet/wikimedia/blubber:2020-06-18-140451-production"

So I am not sure if there is still a problem with the certificate or if there is another problem pulling the new image. I am able to pull the image locally.

The failing pod wasn't deleted and I wasn't able to clean it up.