Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow to deploy images from a private ACR #152

Open
jmalkiew opened this issue Jul 21, 2021 · 4 comments
Open

Allow to deploy images from a private ACR #152

jmalkiew opened this issue Jul 21, 2021 · 4 comments

Comments

@jmalkiew
Copy link

We'd like to be able to deploy images to AKS virtual node from an ACR that is deployed into VNET (private endpoint & Firewall enabled).
Currently that's not possible as AKS fails to create a pod due to "HTTP response status code 409 error code "RegistryErrorResponse" it receives from ACR.

@feiskyer
Copy link
Collaborator

@jmalkiew could you share the result for 'kubectl describe pod '? (remember to remove any credentials if there have)

@jmalkiew
Copy link
Author

@feiskyer we had a case with Azure support opened. I can give you the case number if that will help. The conclusion was „ We double checked with ACR product engineering team what applies to ACI as limitation (https://docs.microsoft.com/en-us/answers/questions/193123/azure-aci-with-private-acr-and-selected-public-net.html) with private ACR applies with Virtual Node with AKS”. That means that if we add a firewall rule to ACR to restrict access to ACR we’ll get an error. I was asked to request an feature request.

@feiskyer
Copy link
Collaborator

feiskyer commented Aug 9, 2021

tagged as a feature request and dependency of ACI

@ryanzhang-oss
Copy link
Contributor

add e2e tests with private container images should be added to validate pulling images with secrets.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants