No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

service principal running pulumi has `Acrpull` role on the container registry

You could create a user assigned identity with Pull rights

ill try that out and report back - thanks!

Same deal:

Created Registry
Created User Assigned Identity
Assigned UserAssignedIdentity the acrpull role on registry
Assigned UserAssignedIdentity to ContainerApp

still erroring :confused:

So the ContainerApp cant pull the image from the ACR? Just to understand 

ive got the image in ACR … trying to write pulumi to stand up a AzureNative.App.ContainerApp with the image in the configuration … but when Pulumi is spinning up the container app, that’s where the error is

Do you pass the identity id to the Container App Private Registry field too?

aha, i didn’t even see that config - will try that now. thank you! :pray:

<https://www.pulumi.com/registry/packages/azure-native/api-docs/app/containerapp/#identity_nodejs>

Other then that the scope of the role assignment is the registry.id

But this are things you should verify via the Portal UI  (guilty  of using the UI sometimes :sweat_smile: )

that’s usually my route … this type of resource is new for me though haha

And Important: The Registry should not be build with Admin mode

otherwhise you could use the username / password and pass it to the <https://www.pulumi.com/registry/packages/azure-native/api-docs/app/containerapp/#registrycredentials>

going to try the user managed identity route and see how it goes

Yes, I prefer this too! Your Sec department will love you for this :smile:

I send you the wrong link above:

<https://www.pulumi.com/registry/packages/azure-native/api-docs/app/containerapp/#registrycredentials>

And here the property: i<https://www.pulumi.com/registry/packages/azure-native/api-docs/app/containerapp/#identity_nodejs|dentity>