You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Azure Container Apps image pull with managed identity
15
15
16
-
You can pull images from private repositories in Microsoft Azure Container Registry using managed identities for authentication to avoid the use of administrative credentials. You can use a system-assigned or user-assigned managed identity to authenticate with Azure Container Registry.
16
+
You can pull images from private repositories in Microsoft Azure Container Registry using managed identities for authentication to avoid the use of administrative credentials. You can use a system-assigned or user-assigned managed identity to authenticate with Azure Container Registry.
17
17
18
-
With a system-assigned managed identity, the identity is created and managed by Azure Container Apps. The identity is tied to your container app and is deleted when your app is deleted. With a user-assigned managed identity, you create and manage the identity outside of Azure Container Apps. It can be assigned to multiple Azure resources, including Azure Container Apps.
18
+
With a system-assigned managed identity, the identity is created and managed by Azure Container Apps. The identity is tied to your container app and is deleted when your app is deleted. With a user-assigned managed identity, you create and manage the identity outside of Azure Container Apps. It can be assigned to multiple Azure resources, including Azure Container Apps.
19
19
20
20
Container Apps checks for a new version of the image whenever a container is started. In Docker or Kubernetes terminology, Container Apps sets each container's image pull policy to `always`.
21
21
@@ -64,14 +64,14 @@ Use the following steps to create a container app with the default quickstart im
64
64
|---|---|
65
65
| **Subscription** | Select your Azure subscription. |
66
66
| **Resource group** | Select an existing resource group or create a new one. |
67
-
| **Container app name** | Enter a container app name. |
67
+
| **Container app name** | Enter a container app name. |
68
68
| **Location** | Select a location. |
69
69
| **Create Container App Environment** | Create a new or select an existing environment. |
70
70
71
71
1. Select the **Review + Create** button at the bottom of the **Create Container App** page.
72
72
1. Select the **Create** button at the bottom of the **Create Container App** window.
73
73
74
-
Allow a few minutes for the container app deployment to finish. When deployment is complete, select **Go to resource**.
74
+
Allow a few minutes for the container app deployment to finish. When deployment is complete, select **Go to resource**.
75
75
76
76
### Add the user-assigned managed identity
77
77
@@ -108,7 +108,7 @@ Create a container app revision with a private image and the system-assigned man
108
108
1. Select **Save**.
109
109
1. Select **Create** from the **Create and deploy new revision** page.
110
110
111
-
A new revision will be created and deployed. The portal will automatically attempt to add the `acrpull` role to the user-assigned managed identity. If the role isn't added, you can add it manually.
111
+
A new revision will be created and deployed. The portal will automatically attempt to add the `acrpull` role to the user-assigned managed identity. If the role isn't added, you can add it manually.
112
112
113
113
You can verify that the role was added by checking the identity from the **Identity** pane of the container app page.
114
114
@@ -133,17 +133,17 @@ This method is typical in Infrastructure as Code (IaC) scenarios.
133
133
If you're not going to continue to use this application, you can delete the Azure Container Apps instance and all the associated services by removing the resource group.
134
134
135
135
>[!WARNING]
136
-
>Deleting the resource group will delete all the resources in the group. If you have other resources in the group, they will also be deleted. If you want to keep the resources, you can delete the container app instance and the container app environment.
136
+
>Deleting the resource group will delete all the resources in the group. If you have other resources in the group, they will also be deleted. If you want to keep the resources, you can delete the container app instance and the container app environment.
137
137
138
138
1. Select your resource group from the *Overview* section.
139
139
1. Select the **Delete resource group** button at the top of the resource group *Overview*.
140
-
1. Enter the resource group name in the confirmation dialog.
141
-
1. Select **Delete**.
140
+
1. Enter the resource group name in the confirmation dialog.
141
+
1. Select **Delete**.
142
142
The process to delete the resource group may take a few minutes to complete.
143
143
144
144
## System-assigned managed identity
145
145
146
-
The method for configuring a system-assigned managed identity in the Azure portal is the same as configuring a user-assigned managed identity. The only difference is that you don't need to create a user-assigned managed identity. Instead, the system-assigned managed identity is created when you create the container app.
146
+
The method for configuring a system-assigned managed identity in the Azure portal is the same as configuring a user-assigned managed identity. The only difference is that you don't need to create a user-assigned managed identity. Instead, the system-assigned managed identity is created when you create the container app.
147
147
148
148
The method to configure a system-assigned managed identity in the Azure portal is:
149
149
@@ -170,14 +170,14 @@ Follow these steps to create a container app with the default quickstart image.
170
170
|---|---|
171
171
| **Subscription** | Select your Azure subscription. |
172
172
| **Resource group** | Select an existing resource group or create a new one. |
173
-
| **Container app name** | Enter a container app name. |
173
+
| **Container app name** | Enter a container app name. |
174
174
| **Location** | Select a location. |
175
175
| **Create Container App Environment** | Create a new or select an existing environment. |
176
176
177
177
1. Select the **Review + Create** button at the bottom of the **Create Container App** page.
178
178
1. Select the **Create** button at the bottom of the **Create Container App** page.
179
179
180
-
Allow a few minutes for the container app deployment to finish. When deployment is complete, select **Go to resource**.
180
+
Allow a few minutes for the container app deployment to finish. When deployment is complete, select **Go to resource**.
181
181
182
182
### Edit and deploy a revision
183
183
@@ -203,9 +203,9 @@ Edit the container to use the image from your private Azure Container Registry,
203
203
204
204
1. Select **Save** at the bottom of the page.
205
205
1. Select **Create** at the bottom of the **Create and deploy new revision** page
206
-
1. After a few minutes, select **Refresh** on the **Revision management** page to see the new revision.
206
+
1. After a few minutes, select **Refresh** on the **Revision management** page to see the new revision.
207
207
208
-
A new revision will be created and deployed. The portal will automatically attempt to add the `acrpull` role to the system-assigned managed identity. If the role isn't added, you can add it manually.
208
+
A new revision will be created and deployed. The portal will automatically attempt to add the `acrpull` role to the system-assigned managed identity. If the role isn't added, you can add it manually.
209
209
210
210
You can verify that the role was added by checking the identity in the **Identity** pane of the container app page.
211
211
@@ -219,12 +219,12 @@ You can verify that the role was added by checking the identity in the **Identit
219
219
If you're not going to continue to use this application, you can delete the Azure Container Apps instance and all the associated services by removing the resource group.
220
220
221
221
>[!WARNING]
222
-
>Deleting the resource group will delete all the resources in the group. If you have other resources in the group, they will also be deleted. If you want to keep the resources, you can delete the container app instance and the container app environment.
222
+
>Deleting the resource group will delete all the resources in the group. If you have other resources in the group, they will also be deleted. If you want to keep the resources, you can delete the container app instance and the container app environment.
223
223
224
224
1. Select your resource group from the *Overview* section.
225
225
1. Select the **Delete resource group** button at the top of the resource group *Overview*.
226
226
1. Enter the resource group name in the confirmation dialog.
227
-
1. Select **Delete**.
227
+
1. Select **Delete**.
228
228
The process to delete the resource group may take a few minutes to complete.
229
229
230
230
::: zone-end
@@ -236,7 +236,7 @@ This article describes how to configure your container app to use managed identi
236
236
237
237
| Prerequisite | Description |
238
238
|--------------|-------------|
239
-
| Azure account | An Azure account with an active subscription. If you don't have one, you can [can create one for free](https://azure.microsoft.com/free/). |
239
+
| Azure account | An Azure account with an active subscription. If you don't have one, you can [can create one for free](https://azure.microsoft.com/free/). |
240
240
| Azure CLI | If using Azure CLI, [install the Azure CLI](/cli/azure/install-azure-cli) on your local machine. |
241
241
| Azure PowerShell | If using PowerShell, [install the Azure PowerShell](/powershell/azure/install-azure-powershell) on your local machine. Ensure that the latest version of the Az.App module is installed by running the command `Install-Module -Name Az.App`. |
242
242
|Azure Container Registry | A private Azure Container Registry containing an image you want to pull. [Quickstart: Create a private container registry using the Azure CLI](../container-registry/container-registry-get-started-azure-cli.md) or [Quickstart: Create a private container registry using Azure PowerShell](../container-registry/container-registry-get-started-powershell.md)|
@@ -270,7 +270,7 @@ az extension add --name containerapp --upgrade
270
270
271
271
# [Azure PowerShell](#tab/azure-powershell)
272
272
273
-
You must have the latest Az PowerShell module installed. Ignore any warnings about modules currently in use.
273
+
You must have the latest Az PowerShell module installed. Ignore any warnings about modules currently in use.
274
274
275
275
```azurepowershell
276
276
Install-Module -Name Az -Scope CurrentUser -Repository PSGallery -Force
@@ -365,7 +365,7 @@ az containerapp env create \
365
365
366
366
# [Azure PowerShell](#tab/azure-powershell)
367
367
368
-
A Log Analytics workspace is required for the Container Apps environment. The following commands create a Log Analytics workspace and save the workspace ID and primary shared key to variables.
368
+
A Log Analytics workspace is required for the Container Apps environment. The following commands create a Log Analytics workspace and save the workspace ID and primary shared key to variables.
369
369
370
370
```azurepowershell
371
371
$WorkspaceArgs = @{
@@ -404,14 +404,14 @@ Continue to the next section to configure user-assigned managed identity or skip
404
404
Follow this procedure to configure user-assigned managed identity:
405
405
406
406
1. Create a user-assigned managed identity.
407
-
1. If you're using PowerShell, assign a `acrpull` role for your registry to the managed identity. The Azure CLI automatically makes this assignment.
407
+
1. If you're using PowerShell, assign a `acrpull` role for your registry to the managed identity. The Azure CLI automatically makes this assignment.
408
408
1. Create a container app with the image from the private registry that is authenticated with the user-assigned managed identity.
409
409
410
410
### Create a user-assigned managed identity
411
411
412
412
# [Azure CLI](#tab/azure-cli)
413
413
414
-
Create a user-assigned managed identity. Replace the *\<PLACEHOLDERS\>* with the name of your managed identity.
414
+
Create a user-assigned managed identity. Replace the *\<PLACEHOLDERS\>* with the name of your managed identity.
415
415
416
416
```azurecli
417
417
IDENTITY="<YOUR_IDENTITY_NAME>"
@@ -425,7 +425,7 @@ az identity create \
425
425
426
426
# [Azure PowerShell](#tab/azure-powershell)
427
427
428
-
Create a user-assigned managed identity. Replace the *\<Placeholders\>* with the name of your managed identity.
428
+
Create a user-assigned managed identity. Replace the *\<Placeholders\>* with the name of your managed identity.
@@ -555,7 +555,7 @@ To configure a system-assigned identity, you'll need to:
555
555
556
556
### Create a container app
557
557
558
-
Create a container with a public image.
558
+
Create a container with a public image.
559
559
560
560
# [Azure CLI](#tab/azure-cli)
561
561
@@ -597,7 +597,7 @@ New-AzContainerApp @AppArgs
597
597
598
598
### Update the container app
599
599
600
-
Update the container app with the image from your private container registry and add a system-assigned identity to authenticate the Azure Container Registry pull. You can also include other settings necessary for your container app, such as ingress, scale and Dapr settings.
600
+
Update the container app with the image from your private container registry and add a system-assigned identity to authenticate the Azure Container Registry pull. You can also include other settings necessary for your container app, such as ingress, scale and Dapr settings.
Copy file name to clipboardExpand all lines: articles/container-apps/samples.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: container-apps
5
5
author: craigshoemaker
6
6
ms.service: container-apps
7
7
ms.topic: conceptual
8
-
ms.date: 07/24/2022
8
+
ms.date: 05/31/2024
9
9
ms.author: cshoe
10
10
---
11
11
@@ -16,9 +16,9 @@ Refer to the following samples to learn how to use Azure Container Apps in diffe
16
16
| Name | Description |
17
17
|--|--|
18
18
|[A/B Testing your ASP.NET Core apps using Azure Container Apps](https://github.com/Azure-Samples/dotNET-Frontend-AB-Testing-on-Azure-Container-Apps)<br /> | Shows how to use Azure App Configuration, ASP.NET Core Feature Flags, and Azure Container Apps revisions together to gradually release features or perform A/B tests. |
19
-
|[gRPC with ASP.NET Core on Azure Container Apps](https://github.com/Azure-Samples/dotNET-Workers-with-gRPC-messaging-on-Azure-Container-Apps)| This repository contains a simple scenario built to demonstrate how ASP.NET Core 6.0 can be used to build a cloud-native applicationhosted in Azure Container Apps that uses gRPC request/response transmission from Worker microservices. The gRPC service simultaneously streams sensor data to a Blazor server frontend, so you can watch the data be charted in real-time. |
19
+
|[gRPC with ASP.NET Core on Azure Container Apps](https://github.com/Azure-Samples/dotNET-Workers-with-gRPC-messaging-on-Azure-Container-Apps)| This repository contains a simple scenario that demonstrates how an ASP.NET Core 6.0 app is built as a cloud-native application. The application is hosted in Azure Container Apps that uses gRPC request/response transmission from Worker microservices. The gRPC service simultaneously streams sensor data to a Blazor server frontend, so you can see the data charted in real-time. |
20
20
|[Deploy an Orleans Cluster to Container Apps](https://github.com/Azure-Samples/Orleans-Cluster-on-Azure-Container-Apps)| An end-to-end sample and tutorial for getting a Microsoft Orleans cluster running on Azure Container Apps. Worker microservices rapidly transmit data to a back-end Orleans cluster for monitoring and storage, emulating thousands of physical devices in the field. |
21
21
|[Deploy a shopping cart Orleans app to Container Apps](https://github.com/Azure-Samples/orleans-blazor-server-shopping-cart-on-container-apps)| An end-to-end example shopping cart app built in ASP.NET Core Blazor Server with Orleans deployed to Azure Container Apps. |
22
22
|[ASP.NET Core front-end with two back-end APIs on Azure Container Apps](https://github.com/Azure-Samples/dotNET-FrontEnd-to-BackEnd-on-Azure-Container-Apps)<br /> | This sample demonstrates ASP.NET Core 6.0 can be used to build a cloud-native application hosted in Azure Container Apps. |
23
23
|[ASP.NET Core front-end with two back-end APIs on Azure Container Apps (with Dapr)](https://github.com/Azure-Samples/dotNET-FrontEnd-to-BackEnd-with-DAPR-on-Azure-Container-Apps)<br /> | Demonstrates how ASP.NET Core 6.0 is used to build a cloud-native application hosted in Azure Container Apps using Dapr. |
24
-
|[Deploy Drupal on Azure Container Apps](https://github.com/Azure-Samples/drupal-on-azure-container-apps)| Demonstrates how to deploy a Drupal site to Azure Container Apps, with Azure Database for MariaDB, and Azure Files to store static assets.|
24
+
|[Deploy Drupal on Azure Container Apps](https://github.com/Azure-Samples/drupal-on-azure-container-apps)| Demonstrates how to deploy a Drupal site to Azure Container Apps, with Azure Database for MariaDB, and Azure Files to store static assets.|
0 commit comments