localhost uses http by default from v1.6.9 and no option is available to over-ride this behavior.

[sandeepbudanur]

Description

Update '#7438' introduced the use of 'http' as DefaultScheme from v1.6.9 onwards. Prior to 1.6.9, 'https' was used as DefaultScheme for localhost. This update has caused containerd to error out while pulling container images from 'http://localhost:/<container_image_path>' where 'https' option had worked previously as in 'https://localhost:/<container_image_path>'.

The localhost change needs an option in '/etc/containerd/config.toml' to override the DefaultScheme from http to https.

Steps to reproduce the issue

1. While deploying a pod, set image path to something like - image: localhost:/<container_image_path>
2. Container image pull request fails and error (400) msg shows the use of http instead of https - "http://localhost:..."

Describe the results you received and expected

(a) If 'DefaultScheme' is defined as "http" or absent in config.toml, we should see "http://localhost:..." in the output while downloading images.

(a) If 'DefaultScheme' is defined as "https" in config.toml, we should see "https://localhost:..." in the output while downloading images.

What version of containerd are you using?

1.6.9

Any other relevant information

No response

Show configuration if it is related to CRI plugin.

No response