"Azure Web 应用容器专用终结点部署不适用于专用终结点容器注册表"

Question

The Setup I have:-<\/strong>我的设置：-<\/strong>

Azure web app container on a private endpoint that also has Vnet integration.私有终结点上的 Azure Web 应用容器也具有 Vnet 集成。
<\/li>
private endpoint azure container registry.私有端点 Azure 容器注册表。
<\/li>
A self hosted azure devops virtual machine for running build jobs.用于运行构建作业的自托管 azure devops 虚拟机。
<\/li>

The Github repos are linked to the azure devops account. Github 存储库链接到 azure devops 帐户。

<\/li><\/ul>

For this particular project, I am building and pushing the docker image to azure container registry and then deploying that image to the azure web app container.对于这个特定项目，我正在构建 docker 映像并将其推送到 azure 容器注册表，然后将该映像部署到 azure Web 应用程序容器。 All of the components in the above system are on the same virtual network.上述系统中的所有组件都在同一个虚拟网络上。 I used this guide for the pipeline:-我将本指南用于管道：-

https:\/\/docs.microsoft.com\/en-us\/azure\/devops\/pipelines\/targets\/webapp-on-container-linux?view=azure-devops&tabs=yaml#deploy-with-azure-web-app-for-container<\/a> https:\/\/docs.microsoft.com\/en-us\/azure\/devops\/pipelines\/targets\/webapp-on-container-linux?view=azure-devops&tabs=yaml#deploy-with-azure-web-app-for-容器<\/a>

The problem:-<\/strong>问题：-<\/strong>

The pushing of image to the container registry works.将图像推送到容器注册表是有效的。 But the azure web app container is not able to pull the container registry image over the private network.但是 azure Web 应用程序容器无法通过专用网络拉取容器注册表映像。 It tries to do it over the public internet which is disabled in registry firewall.它尝试通过在注册表防火墙中禁用的公共 Internet 来执行此操作。 Below is the error message I get:-以下是我收到的错误消息：-

 DockerApiException: Docker API responded with status code=InternalServerError, response={"message":"Get https:\/\/xxxx.azurecr.io\/v2\/docker_file_path\/manifests\/19: denied: client with IP 'xx.xxx.132.231' is not allowed access. Refer https:\/\/aka.ms\/acr\/firewall to grant access."}<\/code><\/pre> The IP xx.xxx.132.231<\/code> is the public outbound IP of that azure web app so it's confirmed that it's tying to do so over the public internet. IP xx.xxx.132.231<\/code>是该 azure Web 应用程序的公共出站 IP，因此已确认它正在通过公共 Internet 执行此操作。
 What I found:-<\/strong>我发现了什么：-<\/strong>
 I searched and found that another person had the exactly same error.我搜索并发现另一个人有完全相同的错误。 The Microsoft team has been working on it since months but it still doesn't work yet.微软团队几个月来一直在研究它，但它仍然无法正常工作。 https:\/\/docs.microsoft.com\/en-us\/answers\/questions\/280774\/app-service-for-web-app-for-containers-container-r.html<\/a> https:\/\/docs.microsoft.com\/en-us\/answers\/questions\/280774\/app-service-for-web-app-for-containers-container-r.html<\/a>
 Question:-<\/strong>问题：-<\/strong>
 Is there any way I could make it work?有什么办法可以让它工作吗？ Is there some other way of deployment for web app containers with private endpoint which can happen entirely over the virtual network?对于具有私有端点的 Web 应用程序容器是否有其他部署方式可以完全通过虚拟网络进行？ Thanks for reading.谢谢阅读。
"

Answer 1

Azure Container Apps Virtual Network Integration Announced 2022-02-02 Azure 容器应用虚拟网络集成宣布 2022-02-02

https:\/\/techcommunity.microsoft.com\/t5\/apps-on-azure-blog\/azure-container-apps-virtual-network-integration\/ba-p\/3096932<\/a> https:\/\/techcommunity.microsoft.com\/t5\/apps-on-azure-blog\/azure-container-apps-virtual-network-integration\/ba-p\/3096932<\/a>

"

"Azure Web 应用容器专用终结点部署不适用于专用终结点容器注册表"

问题描述

1 个解决方案

解决方案1
0 2022-02-02 22:42:30

"Azure Web 应用容器专用终结点部署不适用于专用终结点容器注册表"

问题描述

1 个解决方案

解决方案1 0 2022-02-02 22:42:30

解决方案1
0 2022-02-02 22:42:30