fix local container permission issue

Pavan-Microsoft · Pavan-Microsoft · commit 3531b05f9dbe · 2025-06-03T19:28:52.000+05:30
diff --git a/infra/deploy_backend_docker.bicep b/infra/deploy_backend_docker.bicep
@@ -155,15 +155,15 @@ resource keyVaultSecretsUserAssignment 'Microsoft.Authorization/roleAssignments@
   }
 }
 
-resource containerRegistry 'Microsoft.ContainerRegistry/registries@2021-09-01' existing = {
+resource containerRegistry 'Microsoft.ContainerRegistry/registries@2021-09-01' existing = if (useLocalBuild == 'true') {
   name: acrName
 }
 
-resource AcrPull 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = {
+resource AcrPull 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = if (useLocalBuild == 'true') {
   name: '7f951dda-4ed3-4680-a7ca-43fe172d538d'
 }
 
-resource acrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
+resource acrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = if (useLocalBuild == 'true') {
   name: guid(appService.name, AcrPull.id)
   scope: containerRegistry
   properties: {
diff --git a/infra/deploy_frontend_docker.bicep b/infra/deploy_frontend_docker.bicep
@@ -30,15 +30,15 @@ module appService 'deploy_app_service.bicep' = {
   }
 }
 
-resource containerRegistry 'Microsoft.ContainerRegistry/registries@2021-09-01' existing = {
+resource containerRegistry 'Microsoft.ContainerRegistry/registries@2021-09-01' existing = if (useLocalBuild == 'true') {
   name: acrName
 }
 
-resource AcrPull 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = {
+resource AcrPull 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = if (useLocalBuild == 'true') {
   name: '7f951dda-4ed3-4680-a7ca-43fe172d538d'
 }
 
-resource acrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
+resource acrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = if (useLocalBuild == 'true') {
   name: guid(appService.name, AcrPull.id)
   scope: containerRegistry
   properties: {
diff --git a/infra/main.json b/infra/main.json
@@ -5,7 +5,7 @@
     "_generator": {
       "name": "bicep",
       "version": "0.36.1.42791",
-      "templateHash": "13316946518810732992"
+      "templateHash": "3001611551215986671"
     }
   },
   "parameters": {
@@ -2797,7 +2797,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.36.1.42791",
-              "templateHash": "3016771873556172389"
+              "templateHash": "8556329617743538291"
             }
           },
           "parameters": {
@@ -2887,6 +2887,7 @@
               ]
             },
             {
+              "condition": "[equals(parameters('useLocalBuild'), 'true')]",
               "type": "Microsoft.Authorization/roleAssignments",
               "apiVersion": "2022-04-01",
               "scope": "[format('Microsoft.ContainerRegistry/registries/{0}', parameters('acrName'))]",
@@ -3180,7 +3181,7 @@
             "_generator": {
               "name": "bicep",
               "version": "0.36.1.42791",
-              "templateHash": "2533491669662748886"
+              "templateHash": "14303739685044053977"
             }
           },
           "parameters": {
@@ -3218,6 +3219,7 @@
           },
           "resources": [
             {
+              "condition": "[equals(parameters('useLocalBuild'), 'true')]",
               "type": "Microsoft.Authorization/roleAssignments",
               "apiVersion": "2022-04-01",
               "scope": "[format('Microsoft.ContainerRegistry/registries/{0}', parameters('acrName'))]",

Original file line number	Diff line number	Diff line change
`@@ -155,15 +155,15 @@ resource keyVaultSecretsUserAssignment 'Microsoft.Authorization/roleAssignments@`
`155`	`155`	`}`
`156`	`156`	`}`
`157`	`157`
`158`		`-resource containerRegistry 'Microsoft.ContainerRegistry/registries@2021-09-01' existing = {`
	`158`	`+resource containerRegistry 'Microsoft.ContainerRegistry/registries@2021-09-01' existing = if (useLocalBuild == 'true') {`
`159`	`159`	`name: acrName`
`160`	`160`	`}`
`161`	`161`
`162`		`-resource AcrPull 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = {`
	`162`	`+resource AcrPull 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = if (useLocalBuild == 'true') {`
`163`	`163`	`name: '7f951dda-4ed3-4680-a7ca-43fe172d538d'`
`164`	`164`	`}`
`165`	`165`
`166`		`-resource acrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = {`
	`166`	`+resource acrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = if (useLocalBuild == 'true') {`
`167`	`167`	`name: guid(appService.name, AcrPull.id)`
`168`	`168`	`scope: containerRegistry`
`169`	`169`	`properties: {`
Original file line number	Diff line number	Diff line change
`@@ -30,15 +30,15 @@ module appService 'deploy_app_service.bicep' = {`
`30`	`30`	`}`
`31`	`31`	`}`
`32`	`32`
`33`		`-resource containerRegistry 'Microsoft.ContainerRegistry/registries@2021-09-01' existing = {`
	`33`	`+resource containerRegistry 'Microsoft.ContainerRegistry/registries@2021-09-01' existing = if (useLocalBuild == 'true') {`
`34`	`34`	`name: acrName`
`35`	`35`	`}`
`36`	`36`
`37`		`-resource AcrPull 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = {`
	`37`	`+resource AcrPull 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = if (useLocalBuild == 'true') {`
`38`	`38`	`name: '7f951dda-4ed3-4680-a7ca-43fe172d538d'`
`39`	`39`	`}`
`40`	`40`
`41`		`-resource acrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = {`
	`41`	`+resource acrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = if (useLocalBuild == 'true') {`
`42`	`42`	`name: guid(appService.name, AcrPull.id)`
`43`	`43`	`scope: containerRegistry`
`44`	`44`	`properties: {`