Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Image Pull Failures #1210

Open
2 of 3 tasks
jason-berk-k1x opened this issue Jun 24, 2024 · 2 comments
Open
2 of 3 tasks

Image Pull Failures #1210

jason-berk-k1x opened this issue Jun 24, 2024 · 2 comments
Labels
Needs: triage 🔍 Pending a first pass to read, tag, and assign

Comments

@jason-berk-k1x
Copy link

jason-berk-k1x commented Jun 24, 2024

Please provide us with the following information:

This issue is a: (mark with an x)

  • bug report -> please search issues before submitting
  • documentation issue or request
  • regression (a behavior that used to work and stopped in a new release)

Issue description

I have created via terraform a Container App Environment and Job. The job is given a managed identity which is then granted AcrPull rights and Key Vault rights. the same terraform is ran for two different jobs, each getting its own env and vault. All pull from the same ACR

one of my jobs works and can pull images from ACR. The other fails with authorization errors (after it said the pull was successful)

Expected behavior [What you expected to happen.]

job and pull images from ACR

Actual behavior [What actually happened.]

image pull fails

Screenshots

the job's managed identity is granted ACR pull right in my ACR:

Screenshot 2024-06-24 at 5 21 10 PM

the identity assigned to the job shows it can pull from the ACR in the "global" sub:

Screenshot 2024-06-24 at 5 19 42 PM

when I trigger a job run by putting a message in a queue, the pull fails:

Screenshot 2024-06-24 at 5 18 29 PM

Additional context

my jobs are running in the "dev" sub, but the ACR lives in the "global" sub

@microsoft-github-policy-service microsoft-github-policy-service bot added the Needs: triage 🔍 Pending a first pass to read, tag, and assign label Jun 24, 2024
@jason-berk-k1x
Copy link
Author

seems related to: #1211

@vturecek
Copy link

vturecek commented Jul 2, 2024

@jason-berk-k1x are you still seeing this issue?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Needs: triage 🔍 Pending a first pass to read, tag, and assign
Projects
None yet
Development

No branches or pull requests

2 participants