Skip to content

Main Navigation Documentation Release Notes Support & Contribution Kyma on SAP Community

Appearance

Sidebar Navigation

Quick Install

Modules

Istio

Istio Service Mesh

Restart of Workloads in the Istio Service Mesh

Enabling Istio Sidecar Injection

Istio Version

Istio Proxy as Native Sidecar Container

Configure Istio CA Certificate

Istio Trust Domain

DNS Proxying

Configure Observability for the Istio Service Mesh

Proxy Stats Matcher

Istio Custom Resource

Network Policies

Gateway API CRDs

Beta Istio Features

Disable Istio CNI

Enable Control Plane VPA

Enable Dual Stack

Enable Ambient Mode

Tutorials

Expose Workloads Using oauth2-proxy

Expose Workloads Using Gateway API

Expose a TCP Service Using Gateway API Alpha Support

Exposing Workloads Using Istio VirtualService

Send Requests Using Istio Egress Gateway

Send mTLS Requests Using Istio Egress Gateway

Migrate From ELB to NLB

Technical Reference

Istio Controller Parameters

Istio Controller RBAC Configuration

Troubleshooting

Network Connectivity - Basic Diagnostics

Increase Verbosity of the Ingress Logs

Connection Refused Errors

No Access Error

Forbidden Error when the Host Header Contains a Port

Istio Sidecar Injection Issues

Istio Module Deletion Blocked

SAP HANA Database Connection Issues

Not Found Error

Incompatible Istio Sidecar

Pods Created by Jobs Can't Finish

Init Containers Can't Access the Network

Modified Istio Resources

Istio Cannot Verify an HTTPS Certificate

Uneven Traffic Distribution with DestinationRules

API Gateway

Istio Gateways

Configure a TLS Gateway

Configure an mTLS Gateway

Configure mTLS Authentication in SAP BTP, Kyma Runtime

Configure mTLS Authentication on k3d

Kyma Gateway

Exposing and Securing Workloads

JWT Validation

Secure a Workload with JWT

External Authorization

Secure a Workload with extAuth (Client Credentials Flow)

Secure a Workload with extAuth (Authorization Code Flow)

noAuth Configuration

Expose a Workload with noAuth

(k3d) Expose a Workload with noAuth

Ordering Rules in APIRule v2

Exposing Multiple Workloads

Using a Short Host

Using a Wildcard Host

Configuring IP-Based Access with XFF

Rate Limiting

Configure Local Rate Limiting

Network Policies

Custom Resources

APIGateway Custom Resource

APIRule Custom Resource

RateLimit Custom Resource

ExternalGateway Custom Resource

APIRule Migration

Migrate Multiple APIRules Targeting the Same Workload

Retrieve v1beta1 spec

Migrate jwt Handlers

Migrate noop, no_auth, allow Handlers

Migrate Ory-based Handlers

Changes in APIRule v2

FAQ

Technical Reference

Kyma API Gateway Operator Parameters

API Gateway Request Flow

Network Policies

Troubleshooting Guides

Issues When Creating APIRule

Blocked In-Cluster Communication

Missing Rules in APIRule `v2`

APIRules Missing from Kyma Dashboard

Changed Status Schema in APIRule `v2`

APIRule v1beta1 Management Issues

APIRule v1beta1 No Longer Reconciled

APIRule Conversion Webhook Failed

Kyma Gateway Not Reachable

401 Unauthorized or 403 Forbidden

Connection Refused or Timeout

Could not Resolve Host

Issues with Gardener Certificates

API Gateway Module Deletion Blocked

ExternalGateway Troubleshooting

SAP BTP Operator

Create the sap-btp-manager Secret

Install the SAP BTP Operator Module

Preconfigured Credentials and Access

Customize the Default Credentials and Access

Create Service Instances and Service Bindings

Update Service Instances

Delete Service Bindigs and Service Instances

Migrate Service Instances and Service Bindings from a Custom SAP BTP Service Operator

Working with Multiple Subaccounts

Instance-Level Mapping

Namespace-Level Mapping

Pass Parameters

Rotate Service Bindings

Formats of Service Binding Secrets

Resources

SAP BTP Operator Custom Resource

Service Instance Custom Resource

Service Binding Custom Resource

Tutorials

Create an SAP BTP Service in Your Kyma Cluster

Troubleshooting

You Cannot Delete Leftover Service Instances and Bindings

Resource CR Missing from the Cluster

Service Instance Not Updated When Watched Parameters Secret Is Modified

SAP BTP Operator Not Working After Deleting the Service Binding

Application Connector

Architecture

Technical Reference

Istio Gateway

Application Gateway

Application Connectivity Validator

Runtime Agent

UCL Connection

Configuring Runtime

Tutorials

Establish a Secure Connection with UCL

Maintain a Secure Connection with UCL

Revoke a Client Certificate (RA)

Configure Runtime Agent with UCL

Reconnect Runtime Agent with UCL

Network Policies

Resources

Application CR

Application Connector CR

CompassConnection CR

Tutorials

Integrate an External System with Kyma

Create an Application CR

Register a Service

Register a Secured API

Disable TLS Validation

Call a Registered External Service from Kyma

Cloud Manager

Cloud Manager Module

NFS

VPC Peering

Authorizing Cloud Manager in the Remote Cloud Provider

Redis

Resources

IpRange Custom Resource

AwsNfsVolume Custom Resource

AwsNfsVolumeBackup Custom Resource

AwsNfsBackupSchedule Custom Resource

AwsNfsVolumeRestore Custom Resource

GcpNfsVolume Custom Resource

GcpNfsVolumeBackup Custom Resource

GcpNfsBackupSchedule Custom Resource

GcpNfsVolumeRestore Custom Resource

GcpNfsBackupDiscovery Custom Resource

AwsVpcPeering Custom Resource

GcpVpcPeering Custom Resource

AzureVpcPeering Custom Resource

AwsRedisInstance Custom Resource

GcpRedisInstance Custom Resource

AzureRedisInstance Custom Resource

AlicloudRedisInstance Custom Resource

AwsRedisCluster Custom Resource

GcpRedisCluster Custom Resource

GcpSubnet Custom Resource

AzureRedisCluster Custom Resource

AlicloudRedisCluster Custom Resource

SapNfsVolume Custom Resource

SapNfsVolumeSnapshot Custom Resource

SapNfsVolumeSnapshotSchedule Custom Resource

SapNfsVolumeSnapshotRestore Custom Resource

AzureVpcDnsLink Custom Resource

Tutorials

Using NFS in Amazon Web Services

Using NFS in Google Cloud

Creating VPC Peering in Amazon Web Services

Creating VPC Peering in Google Cloud

Creating VPC Peering in Microsoft Azure

Using AwsRedisInstance Custom Resources

Using GcpRedisInstance Custom Resources

Using AzureRedisInstance Custom Resources

Using AlicloudRedisInstance Custom Resources

Using AwsRedisCluster Custom Resources

Using GcpRedisCluster Custom Resources

Using AzureRedisCluster Custom Resources

Using AlicloudRedisCluster Custom Resources

Linking Your Kyma Network to Microsoft Azure Private DNS Zone

Linking Your Kyma Network to Microsoft Azure DNS Private Resolver

Glossary

Eventing

Event Naming and Cleanup

Eventing Metrics

Choose an Eventing Backend

Configure SAP Event Mesh for Kyma Eventing

Subscribe to Multiple Event Types

Manage Subscriber Workload with Max-In-Flight

Troubleshooting for the Eventing Module

General Diagnostics: Event Not Delivered

Subscriber Receives Irrelevant Events

NATS Backend Storage Is Full

Resources

Eventing CR

Subscription CR

Keda

Configuring Keda Module

Keda Module Footprint

KEDA Demo Application

Keda CR

Keda Logging Configuration

KEDA HTTP Add-on

Troubleshooting Guides

HTTP Add-on Returns 503 Errors During Cold Start

NATS

Accessing the NATS Server Using CLI

NATS Custom Resource

Troubleshooting

General Diagnostics: NATS Module Readiness and Connectivity

Published Events Are Pending in the Stream

Registry Cache

Configuring Registry Cache

Providing Credentials for a Private Upstream Registry

Validation of Registry Cache Configuration

Managing Registry Cache Configuration

Rotating Credentials

Resources

RegistryCache Custom Resource

RegistryCacheConfig Custom Resource

Troubleshooting

Registry Cache Does Not Cache Images from a Private Registry

Serverless

From Code to Function

Configuring Serverless

Development Toolkit

Function Security

Limitations

Logging Configuration

Migrate to the New Runtime API

Runtime Deprecation Schedule

Tutorials

Create an Inline Function

Create a Git Function

Expose the Function

Manage Functions Through Kyma CLI

Log Into a Private Package Registry

Send and Receive Cloud Events

Customize Function Traces

Override Runtime Image

Inject Environment Variables

Use External Scalers

Access to Secrets Mounted as Volume

Resources

Function CR

Serverless CR

Technical Reference

Serverless Architecture

Environment Variables in Functions

Sample Functions

Function Processing

Git Source Type

Function's Specification

Available Presets

Troubleshooting Guides

Serverless Periodically Restarting

Function Fails to Start With Customized OpenTelemetry Dependencies

Git Source Certificate Signed by Unknown Authority

Best Practices

Telemetry

Telemetry Pipeline API

Migrate Telemetry Pipelines to v1beta1

Set Up the OTLP Input

Collecting Logs

Configure Application Logs

Configure Istio Access Logs

Collecting Traces

Configure Istio Tracing

Collecting Metrics

Collect Prometheus Metrics

Collect Istio Metrics

Collect Runtime Metrics

Filtering and Processing Data

Filter Logs

Filter Traces

Filter Metrics

Transform and Filter with OTTL

Transform with OTTL

Filter with OTTL

Transformation to OTLP Logs

Automatic Data Enrichment

Integrate with your OTLP Backend

Migrate Your LogPipeline from HTTP to OTLP Logs

Monitor Pipeline Health

Troubleshooting the Telemetry Module

Architecture

Logs Architecture

Traces Architecture

Metrics Architecture

Istio Integration

Integration Guides

SAP Cloud Logging

Dynatrace

Prometheus, Grafana and Kiali

Loki

Jaeger

Amazon CloudWatch

Kubernetes Events

OpenTelemetry Demo App

OTel Operator Auto-Instrumentation

Sample App

Resources

Telemetry

LogPipeline

TracePipeline

MetricPipeline

Logs (Fluent Bit)

Community Modules

Update Community Modules

Registry Proxy

Registry Proxy Recommendations

Cluster Roles

Tutorials

Create Kyma Registry Proxy Connection and a Target Deployment

Resources

Connection CR

Registry Proxy CR

Technical Reference

Architecture

Docker Registry

Module Configuration

Storage Configuration

Tutorials

Use Docker Registry Internally

Expose Docker Registry

Remove Image Manifest

Resources

Docker Registry Custom Resource

CAP Operator

User Interfaces

Kyma Dashboard

Command Palette

Extensibility

Deploying and Accessing Busola in a Kubernetes Cluster

Deploying and Accessing Busola in k3d

Configuring Busola Deployment

Generating a Token for Busola Instances

Terminal

Tutorials

Checking Services with curl in the Terminal

Troubleshooting Guides

Cannot Connect to Cluster

Cannot Find Resource

Connectivity Issues K3d

SSL Issue

Technical Reference

Configuration

Feature Flags

Kyma CLI

Tutorials

Adding and Deleting a Kyma Module Using Kyma CLI

Setting Your Module to the Managed and Unmanaged State in Kyma CLI

Running an Application Using the `app push` Command

Fast Prototyping on SAP BTP Kyma: App Push

Commands

kyma

kyma alpha

kyma alpha authorize

kyma alpha authorize group

kyma alpha authorize repository

kyma alpha authorize serviceaccount

kyma alpha authorize user

kyma alpha dashboard

kyma alpha dashboard start

kyma alpha dashboard stop

kyma alpha diagnose

kyma alpha diagnose cluster

kyma alpha diagnose istio

kyma alpha diagnose logs

kyma alpha hana

kyma alpha hana map

kyma alpha kubeconfig

kyma alpha kubeconfig generate

kyma alpha module

kyma alpha module catalog

kyma alpha module list

kyma alpha module pull

kyma alpha provision

kyma alpha reference-instance

kyma app

kyma app push

kyma completion

kyma completion bash

kyma completion fish

kyma completion powershell

kyma completion zsh

kyma help

kyma module

kyma module add

kyma module catalog

kyma module delete

kyma module list

kyma module manage

kyma module pull

kyma module unmanage

kyma version

Operation Guides

Operations

Troubleshooting

Glossary

On this page

Troubleshooting

Troubleshoot problems related to the Registry Cache module.

Registry Cache Does Not Cache Images from a Private Registry

Edit this page on GitHub

Pager

Previous pageRegistryCacheConfig Custom Resource

Next pageRegistry Cache Does Not Cache Images from a Private Registry

Copyright © 2018-2026 The Kyma project authors.

Terms of Use | Privacy Statement | Legal Disclosure