It looks like the Docker registry for Elastic may be misbehaving, requiring authentication to pull public images:
$ docker pull docker.elastic.co/elasticsearch/elasticsearch:6.6.2
Error response from daemon: unauthorized: authentication required
This seems to be true for any version of any application, including ES, Kibana, and Logstash. I've tested this on multiple machines from multiple public addresses as well.