1.纯内网环境，自签名Harbor。
2.确认了Harbor仓库里存在runner:latest-amd64镜像
3.确认了集群内每个Node 使用docker pull、crictl pull都可以拉取镜像
4.rainbond在离线环境下，在已有的kubesphere集群上，将rainbond和源码构建镜像上传到私有的harbor（和报错的是同一个Harbor）镜像仓库并通过helm方式安装的。
5.确认了BuildKit 的configmap配置
configmap是在安装时候自动生成的，cm名是自定义的域名dockerhub-fri-local之前没有http = false\insecure = true两项是后加的。

具体构建日志

Build app version from source code start
2pull or clone code successfully, start code build
3CodeVersion:55423e2 Author: Commit:psdp-module-hr-server.jar
4Start make code package
5make code package success
6Start compiling the source code
7create build code job success
8builder:-----> Detected CPU architecture linux-x86_64
9builder:-----> Prepare Handle Language Java-jar RuntimeVersion 17
10builder:-----> Detection Java-jar runtime java.runtime.version=17
11builder:-----> Start pre-compile...
12builder:-----> Prepare Handle 17 Success
13builder:-----> Use local Jvm common... done
14builder:-----> Installing OpenJDK 17...
15builder: Downloading JDK to cache: /tmp/cache/buildpack/openjdk_17.0.9.tar.gz
16builder:-----> Use custom Java-jar Procfile
17[BUILD JOB CHECK] Pod 8f2d223a469ccfde62325859732b9761-20260130104728 is now running
18builder: Downloading Pinpoint agent to cache: /tmp/cache/buildpack/pinpoint-agent-2.0.3.tar.gz
19builder:-----> Install pinpoint agent success
20builder: Downloading JMX Exporter agent to cache: /tmp/cache/buildpack/jmx_prometheus_javaagent-0.15.0.jar
21builder:-----> Install jmx exporter agent success
22builder: done
23builder:-----> Discovering process types
24builder: Procfile declares types -> web
25builder:-----> Compiled slug size is 363M
26code build success
27create build code job success
28#1 transferring dockerfile: 419B done
29#1 DONE 0.0s
30
31#1 [internal] load build definition from Dockerfile
32#2 DONE 0.0s
33
34#3 [internal] load metadata for dockerhub.fri.local/goodrain/runner:latest-amd64
35#3 ERROR: failed to authorize: failed to fetch oauth token: Post "https://dockerhub.fri.local/service/token": tls: failed to verify certificate: x509: certificate signed by unknown authority
36#2 [auth] goodrain/runner:pull token for dockerhub.fri.local
37> [internal] load metadata for dockerhub.fri.local/goodrain/runner:latest-amd64:
38------
39------
40--------------------
411 |
42Dockerfile:2
432 | >>> FROM dockerhub.fri.local/goodrain/runner:latest-amd64
444 | ARG CODE_COMMIT_USER
453 | ARG CODE_COMMIT_HASH
46error: failed to solve: dockerhub.fri.local/goodrain/runner:latest-amd64: failed to authorize: failed to fetch oauth token: Post "https://dockerhub.fri.local/service/token": tls: failed to verify certificate: x509: certificate signed by unknown authority
47--------------------
48[BUILD JOB CHECK] Pod 8f2d223a469ccfde62325859732b9761-20260130104728-dockerfile is now running
49构建镜像失败，请查看构建日志
50编译失败，请查看构建日志
51编译失败，请查看构建日志

buildkit configmap配置
Image description