Im creating an `AzureNative ContainerRegistry Registry` and

Question

Im creating an `AzureNative ContainerRegistry Registry` and publishing a container image in there When I try and reference the image on the `Template` object via`AzureNative App ContainerApp` it s failing with the error ```UNAUTHORIZED authentication required``` Is there a way to provide Pulumi with the credentials for the registry Maybe Im missing something in the docs

icy-doctor-13719 · Answer

service principal running pulumi has `Acrpull` role on the container registry

many-telephone-49025 · Answer

You should create a managed identity with Pull rights

many-telephone-49025 · Answer

And add it to the ContainerApp

icy-doctor-13719 · Answer

ill try that out and report back thanks

icy-doctor-13719 · Answer

Same deal Created Registry Created User Assigned Identity Assigned UserAssignedIdentity the acrpull role on registry Assigned UserAssignedIdentity to ContainerApp still erroring confused

many-telephone-49025 · Answer

So the ContainerApp cant pull the image from the ACR Just to understand

many-telephone-49025 · Answer

You can push Images to ACR

icy-doctor-13719 · Answer

ive got the image in ACR trying to write pulumi to stand up a AzureNative App ContainerApp with the image in the configuration but when Pulumi is spinning up the container app that s where the error is

many-telephone-49025 · Answer

Do you pass the identity id to the Container App Private Registry field too

icy-doctor-13719 · Answer

aha i didn t even see that config will try that now thank you pray

many-telephone-49025 · Answer

many-telephone-49025 · Answer

Other then that the scope of the role assignment is the registry id

many-telephone-49025 · Answer

But this are things you should verify via the Portal UI guilty of using the UI sometimes sweat smile

icy-doctor-13719 · Answer

that s usually my route this type of resource is new for me though haha

many-telephone-49025 · Answer

And Important The Registry should not be build with Admin mode

many-telephone-49025 · Answer

So `AdminUserEnabled` should be false

icy-doctor-13719 · Answer

brilliant

many-telephone-49025 · Answer

otherwhise you could use the username password and pass it to the <https www pulumi com registry packages azure native api docs app containerapp registrycredentials>

icy-doctor-13719 · Answer

going to try the user managed identity route and see how it goes

many-telephone-49025 · Answer

Yes I prefer this too Your Sec department will love you for this smile

icy-doctor-13719 · Answer

yea passwords are the devil

icy-doctor-13719 · Answer

I am security haha

many-telephone-49025 · Answer

smile

many-telephone-49025 · Answer

I send you the wrong link above And here the property i