Image Pull Failures

[jason-berk-k1x]

Please provide us with the following information:

This issue is a: (mark with an x)

• [x] bug report -> please search issues before submitting
• [ ] documentation issue or request
• [x] regression (a behavior that used to work and stopped in a new release)

Issue description

I have created via terraform a Container App Environment and Job. The job is given a managed identity which is then granted AcrPull rights and Key Vault rights. the same terraform is ran for two different jobs, each getting its own env and vault. All pull from the same ACR

one of my jobs works and can pull images from ACR. The other fails with authorization errors (after it said the pull was successful)

Expected behavior [What you expected to happen.]

job and pull images from ACR

Actual behavior [What actually happened.]

image pull fails

Screenshots

the job's managed identity is granted ACR pull right in my ACR:

the identity assigned to the job shows it can pull from the ACR in the "global" sub:

when I trigger a job run by putting a message in a queue, the pull fails:

Additional context

my jobs are running in the "dev" sub, but the ACR lives in the "global" sub

[jason-berk-k1x]

seems related to: https://github.com/microsoft/azure-container-apps/issues/1211