Azure / Azure/Azure-Spring-Apps

Remove need for a password when deploying container image from Azure Container Registry

Open
#42 1 comment 0 reactions 0 assignees View on GitHub
Tracking
Dominant language
No language data
Stars
9
Forks
11
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**

When creating a new deployment, or updating a deployment, for a container image hosted within Azure Container Registry into Azure Spring Apps, a registry username and password must be passed in the az cli command line with the following parameters: --registry-username and --registry-password.

Reference: https://learn.microsoft.com/en-us/cli/azure/spring/app/deployment?view=azure-cli-latest#az-spring-app-deployment-create

We would like to avoid needing to use a password.

**Describe the solution you'd like**

Allow the use of a managed identity to connect to the container registry, or allow an access token to be passed similar to the ACR login command documented here - https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication?tabs=azure-cli#az-acr-login-with---expose-token

**Describe alternatives you've considered**

There does not appear to be any other alternatives when running from the command line.

When running within a DevOps pipelines, store the password into Key Vault and setup the pipeline variables to read from Key Vault.

Though, this requires somebody to generate a password and put it into Key Vault.

**Describe the Customer Impact**

Would like to avoid the need for any password.

**Additional context**

It seems the password is required due to the Spring Apps API requiring it to be set within the imageregistrycredential as documented here - https://learn.microsoft.com/en-us/rest/api/azurespringapps/deployments/update?tabs=HTTP#imageregistrycredential

**Can we contact you for additional details?**

Yes.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.