Why I get access denied while editing my container app configurations after creating it using github actions?

Question

I have github workflow which pulls images from github container registry and deploys it on container apps. I am using Azure container apps build and deploy action.

Container app is created successfully, but when I try to edit some configuration (say adding custom domain) on azure portal, I get access denied message:

The following field(s) are either invalid or missing. Field 'template.containers.testcontainer.image' is invalid with details: 'Invalid value: "ghcr.io/dummyuser/testimage:latest": GET https:?scope=repository%3Adummyuser%2Ftestimage%3Apull&service=ghcr.io: DENIED: denied';.

Answer 1

ASHWANI PANDEY Thank you for sharing the solution. It will greatly help others facing similar issues and looking for a solution. Microsoft Q&A has policy: Accept an answer that question authors cannot accept their own answers and hence I am posting your answer in case you like to accept.

Resolution:

The issue was using GITHUB_TOKEN to deploy container App in registryPassword which didn't have right permissions and hence it was denied. You had created a new token with read permissions and the issue was resolved.