Azure 容器实例：在 ARM 模板中使用基于客户端证书的服务主体向私有 ACR 进行身份验证

Question

The Azure Container Instances ARM template schema exposes the below fields to authenticate to pull an image from a private ACR using a service principal:

"imageRegistryCredentials": [
      {
        "server": "myacrserver.azurecr.io",
        "username": "00000-000-000-00",  // Service principal application ID
        "password": "servicePrincipalClientSecret"
      }
    ],

Using an ARM template based deployment, is it possible to use a service principal with a client certificate based login, instead of a client secret? Can I specify the "password" field to be the base64 encoding of the private key of the certificate that can be used to access the relevant service principal?

Answer 1

I'm afraid it's impossible. ARM template does not have the property to set the credential with a certificate instead of the secret. Maybe it's possible in the future, but not it does not support it.