Azure / Azure/Azure-Spring-Apps

Remove need for a password when deploying container image from Azure Container Registry

Aperta
#42 1 commento 0 reazioni 0 assegnatari Vedi su GitHub
Tracking
Lingua principale
Nessun dato sulla lingua
Stelle
9
Fork
11
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

**Is your feature request related to a problem? Please describe.**

When creating a new deployment, or updating a deployment, for a container image hosted within Azure Container Registry into Azure Spring Apps, a registry username and password must be passed in the az cli command line with the following parameters: --registry-username and --registry-password.

Reference: https://learn.microsoft.com/en-us/cli/azure/spring/app/deployment?view=azure-cli-latest#az-spring-app-deployment-create

We would like to avoid needing to use a password.

**Describe the solution you'd like**

Allow the use of a managed identity to connect to the container registry, or allow an access token to be passed similar to the ACR login command documented here - https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication?tabs=azure-cli#az-acr-login-with---expose-token

**Describe alternatives you've considered**

There does not appear to be any other alternatives when running from the command line.

When running within a DevOps pipelines, store the password into Key Vault and setup the pipeline variables to read from Key Vault.

Though, this requires somebody to generate a password and put it into Key Vault.

**Describe the Customer Impact**

Would like to avoid the need for any password.

**Additional context**

It seems the password is required due to the Spring Apps API requiring it to be set within the imageregistrycredential as documented here - https://learn.microsoft.com/en-us/rest/api/azurespringapps/deployments/update?tabs=HTTP#imageregistrycredential

**Can we contact you for additional details?**

Yes.

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.