This message was deleted.

sparse-intern-71089

07/08/2020, 3:58 PM

This message was deleted.

able-beard-29160

07/08/2020, 4:07 PM

You need to add a "Network Contributor" assignment to the service principal attached to your AKS. Admin access isn't really necessary, but if you have it enabled, instead of assigning a network contributor role to the AKS service principal, you could provide a value for the

imagePullSecrets

property of a deployment.

able-beard-29160

07/08/2020, 4:07 PM

I mean, I'm pretty sure it's a permissions issue what you're seeing, that's why I suggested the above.

great-flag-86735

07/08/2020, 4:18 PM

Ok will look into that. Thanks!

quiet-motherboard-85927

07/08/2020, 11:49 PM

For pulling the image the AZ Role is: AcrPull I remember having to provide permission ‘AcrPull’, explicity assigned to the SPN of the AKS cluster.

able-beard-29160

07/09/2020, 6:10 AM

Ah, yes, my bad 😞

AcrPull

is what's needed. I've quickly glanced over my code, but

Network Contributor

was used for configuring a public IP. Looking a second time now, indeed I've used

AcrPull

for pulling private images.

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.