使用 terraform 清除容器注冊表錯誤

Question

這是創建 CSR 的示例代碼。 申請后，我們收到如下所述的錯誤。 來自源代碼的示例代碼

provider "azurerm" {
  features {}
}
resource "azurerm_resource_group" "example" {
  name     = "example-rg"
  location = "West Europe"
}
resource "azurerm_container_registry" "example" {
  name                = "example"
  resource_group_name = azurerm_resource_group.example.name
  location            = azurerm_resource_group.example.location
  sku                 = "Basic"
}
resource "azurerm_container_registry_task" "example" {
  name                  = "example-task"
  container_registry_id = azurerm_container_registry.example.id
  platform {
    os = "Linux"
  }
   encoded_step {
    task_content = <<EOF
    version: v1.2.0
    steps:
      - cmd: acr purge --filter 'demo:api.*' --untagged --ago 10m
        disableWorkingDirectoryOverride: true
        timeout: 3600
    EOF
    context_path = "/dev/null"
  }
  
}

應用時出現此錯誤

Unable to find image 'demo:latest' locally
docker: Error response from daemon: pull access denied for demo, repository does not exist or may require 'docker login': denied: requested access to the resource is denied.

感謝任何幫助！

Answer 1

我嘗試在我的環境中重現相同的內容，以使用 Terraform 代碼創建帶有任務的 container_registry：

Terraform 代碼

provider "azurerm" {
  features {}
}
resource "azurerm_resource_group" "Thejesh" {
  name     = "Thejesh-rg"
  location = "West Europe"
}
resource "azurerm_container_registry" "Thejesh" {
  name                = "Thejesh"
  resource_group_name = azurerm_resource_group.Thejesh.name
  location            = azurerm_resource_group.Thejesh.location
  sku                 = "Basic"
}
resource "azurerm_container_registry_task" "Thejesh" {
  name                  = "Thejesh-task"
  container_registry_id = azurerm_container_registry.Thejesh.id
  platform {
    os = "Linux"
  }
  encoded_step {
    task_content = <<EOF
version: v1.1.0
steps: 
  - cmd: acr purge   --filter 'samples/devimage1:.*' --filter 'samples/devimage2:.*'   --ago 0d --untagged
    disableWorkingDirectoryOverride: true
    timeout: 3600
EOF
  }
  agent_setting {
    cpu = 2
  }
  base_image_trigger {
    name                        = "defaultBaseimageTriggerName"
    type                        = "Runtime"
    enabled                     = true
    update_trigger_payload_type = "Default"
  }
  timer_trigger {
    name     = "t1"
    schedule = "0 1 * * Sun"
    enabled  = true
  }
}

Terraform 申請

一旦運行代碼資源被創建。

任務也在同一個容器中創建