Container Registry - Re-visit Login to Registry via Managed Identity

azuredemoenvironment / ade

Azure Demo Environment

MIT License

34 stars 11 forks source link

Container Registry - Re-visit Login to Registry via Managed Identity #154

Open joshuawaddell opened 3 years ago

joshuawaddell commented 3 years ago

Currently, there is not an established method for logging in to a Container Registry via a Managed Identity (System or User-Assigned). We are using the admin login to the Container Registry right now, but that is not ideal.

The Container Registry deployment currently has the Role Assignment code commented out, which assigned the ACR Pull role. This will most likely need to be moved to an AZ CLI task. At the moment, it is not possible to pull an Object ID from a resource in ARM.

joshuawaddell commented 2 years ago

Re-enabled role assignment for the Managed Identity
Left adminUserEnabled set to true