Skip to content

Use managed service identity for pulling from ACR#2796

Merged
bwateratmsft merged 4 commits intomainfrom
bmw/appSvcMsi
Mar 22, 2021
Merged

Use managed service identity for pulling from ACR#2796
bwateratmsft merged 4 commits intomainfrom
bmw/appSvcMsi

Conversation

@bwateratmsft
Copy link
Collaborator

@bwateratmsft bwateratmsft commented Mar 18, 2021

Fixes #1685 so we can finally stop punting it. 😄

Still need to verify:

  • The newly-added @azure/arm-authorization package does not get loaded before Deploy to Azure App Service is called
    • Unpacked
    • Webpacked
  • Unconditionally setting the identity field doesn't cause problems with deployments from other container registries (e.g. Docker Hub)

@bwateratmsft bwateratmsft requested a review from a team as a code owner March 18, 2021 20:10
Copy link
Contributor

@karolz-ms karolz-ms left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just assume you will attempt to grant ACR access before deploying the image, so waiting with approval to see if that is successful

@bwateratmsft bwateratmsft merged commit 83f016a into main Mar 22, 2021
@bwateratmsft bwateratmsft deleted the bmw/appSvcMsi branch March 22, 2021 18:02
@microsoft microsoft locked and limited conversation to collaborators Oct 27, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Deploy from ACR to App Service should use MSI with ACRPull role

2 participants