How to fix toomanyrequests: You have reached your pull rate limit in Kubernetes

# Login locally
docker login

# Check remaining pulls
TOKEN=$(curl -s "https://auth.docker.io/token?service=registry.docker.io&scope=repository:library/ubuntu:pull" | jq -r .token)
curl --head -H "Authorization: Bearer $TOKEN" \
  https://registry-1.docker.io/v2/library/ubuntu/manifests/latest 2>&1 | grep -i ratelimit

RateLimit-Limit: 200
RateLimit-Remaining: 195

# Create docker-registry secret
kubectl create secret docker-registry dockerhub-secret \
  --docker-server=docker.io \
  --docker-username=<YOUR_USERNAME> \
  --docker-password=<YOUR_ACCESS_TOKEN> \
  --docker-email=<YOUR_EMAIL>

# Patch default ServiceAccount
kubectl patch serviceaccount default -p \
  '{"imagePullSecrets": [{"name": "dockerhub-secret"}]}'

spec:
  template:
    spec:
      imagePullSecrets:
      - name: dockerhub-secret
      containers:
      - name: app
        image: myrepo/myapp:latest

# Re-authenticate to apply new limits
docker logout && docker login

# Verify unlimited status
curl -s "https://hub.docker.com/v2/users/<USERNAME>" | jq '.is_paid'

# Run official pull-through cache
docker run -d \
  -p 5000:5000 \
  -e REGISTRY_PROXY_REMOTEURL=https://registry-1.docker.io \
  --name registry-proxy \
  registry:2

# Configure Docker daemon to use mirror
cat > /etc/docker/daemon.json <<EOF
{
  "registry-mirrors": ["http://localhost:5000"]
}
EOF

# Reload Docker
systemctl reload docker

docker pull mirror.gcr.io/library/ubuntu:latest
docker pull mirror.gcr.io/library/nginx:alpine

# GitHub Actions example
name: Build
on: push

jobs:
  build-1:
    runs-on: ubuntu-latest
    steps:
      - uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKERHUB_USER_1 }}
          password: ${{ secrets.DOCKERHUB_TOKEN_1 }}
      - run: docker build . -t myapp:v1

  build-2:
    runs-on: ubuntu-latest
    steps:
      - uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKERHUB_USER_2 }}
          password: ${{ secrets.DOCKERHUB_TOKEN_2 }}
      - run: docker build . -t myapp:v2

# Pin specific versions (better caching)
FROM ubuntu:22.04

# NOT this (always re-pulls):
FROM ubuntu:latest

# GitHub Actions with layer caching
- uses: docker/build-push-action@v4
  with:
    context: .
    cache-from: type=registry,ref=myregistry/myapp:buildcache
    cache-to: type=registry,ref=myregistry/myapp:buildcache,mode=max