Can Azure Container Instance be configured to pull images from a private Container Registry using managed identity? I am currently developing a CI/CD pipeline to automate the deployment of a standalone Python simulation application to the Container Instance. Moreover, I would welcome your suggestions on scheduling the Container Instance to run daily.

Hello @ Velluva, Anoop ! Yes you can do that , suppose your Private Registry integrates Authentication or is a an Azure Container Registry You have to Assign the role ACRPULL to your Managed Identity az role assignment create --assignee $principalId --role acrpull --scope $(az acr show --name myRegistry --resource-group myResourceGroup --query id --output tsv) For a Schedule you can integrate Logic Apps , or Cron in the Python application if it supports scheduling. Also Azure Functions or Azure Automation may help you ! LINKS https://learn.microsoft.com/en-us/azure/container-instances/container-instances-managed-identity https://learn.microsoft.com/en-us/azure/container-instances/container-instances-stop-start I hope this helps! Kindly mark the answer as Accepted and Upvote in case it helped! Regards

Managed Identity - Azure Container Instance and Container Registry

Accepted answer

Konstantinos Passadis 17,301 Reputation points MVP

2024-01-19T16:40:22.5333333+00:00
Hello @Velluva, Anoop ! Yes you can do that , suppose your Private Registry integrates Authentication or is a an Azure Container Registry

You have to Assign the role ACRPULL to your Managed Identity

az role assignment create --assignee $principalId --role acrpull --scope $(az acr show --name myRegistry --resource-group myResourceGroup --query id --output tsv)

For a Schedule you can integrate Logic Apps , or Cron in the Python application if it supports scheduling. Also Azure Functions or Azure Automation may help you ! LINKS https://learn.microsoft.com/en-us/azure/container-instances/container-instances-managed-identity https://learn.microsoft.com/en-us/azure/container-instances/container-instances-stop-start I hope this helps! Kindly mark the answer as Accepted and Upvote in case it helped! Regards
Please sign in to rate this answer.

1 person found this answer helpful.
Velluva, Anoop 65 Reputation points

2024-01-21T00:01:30.7566667+00:00

Yes, Its working for me! Thanks for your help. My container instance stays in the "running" state even after the successful execution of the code. How to stop the Azure Container Instance (ACI) once the application execution is completed (dynamically).

Konstantinos Passadis 17,301 Reputation points MVP

2024-01-21T01:15:34.3333333+00:00

Hello @Velluva, Anoop ! Thats great ! Thank you for your input The restart policy setting of a container group determines how container instances start or stop by default. You can override the default setting by manually stopping or starting a container group. Note If your container group is configured with an IP address, that IP address can change when the container group is restarted. Stop Manually stop a running container group - for example, by using the az container stop command or Azure portal. For certain container workloads, you might want to stop a long-running container group after a defined period to save on costs. When a container group enters the Stopped state, it terminates and recycles all the containers in the group. It does not preserve container state. When the containers are recycled, the resources are deallocated and billing stops for the container group. The stop action has no effect if the container group already terminated (is in either a Succeeded or Failed state). For example, a container group with run-once container tasks that ran successfully terminates in the Succeeded state. Attempts to stop the group in that state do not change the state. Follow this steps: https://learn.microsoft.com/en-us/azure/container-instances/container-instances-stop-start Kindly let us know if you need additional help ! Regards

Velluva, Anoop 65 Reputation points

2024-01-21T13:15:25.33+00:00

Thank you! it is working as expected with --restart-policy Never
Sign in to comment

Share via

Managed Identity - Azure Container Instance and Container Registry

0 additional answers