Container Apps Pull Image using an Azure Service Principal

This post will go over how to use a service principal to pull an image to your Container App.

Overview

In most cases pulling using system or user managed identity is the recommended to authenicate with your ACR.

We suggest you follow the authenication method listed in the documentation below.

Azure Container Apps image pull from Azure Container Registry with managed identity

This blog details the scenario where you are required to use a service princial by your organization.

Create a service princial and assign it ACR Pull Cerdentials.

1. Please follow the instructions from the below documentation.

   Create a service principal

2. Please take notes of the following values, before proceeding to the next steps.

   Azure Container Registry HostName

   Example: myazcrname.azurecr.io

   Service Prinical App ID

   Example: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

   Service Prinical Secret

   Example: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

   Image Name and Tag

   Example: myimagename:latest

Configure the Container App to pull using the Service Principal.

1. Naviate to your container app, if you do not have an existing container app please go ahead and follow the below documentation in order to create one.

   Quickstart: Deploy your first container app using the Azure portal

2. Naviate to the Revisions and Replica section, under the Application Drop Down menu.

3. Select the Create a new revision option.

4. Click on the container image that needs to be updated.

   

5. Select the Docker Hub or other registries radio button. Then select private.

   

6. In the Registry login server click Add new.

   

   In the Login server field enter your Azure Container Registry Host Name. 🔗

   In the Registry user name enter your Application ID of the service princial.🔗

   In the Registry password, enter your Service Principal Secret.🔗

   Hit the Add button.

7. In the Image and tag field enter your image name and tag of the image you would like to pull from the contianer registry.🔗

8. Make sure to hit Save, to change the container settings. Then hit Create when you are ready to create the revision.