Connect Azure ACR¶
Before you begin¶
- Have a Microsoft Azure Account created
- Azure CLI installed or use the online AZ Cloud Shell
- Read about connecting Image Registry credentials with Platformer
Go to the Azure Portal and create a Container Registry.
Create a file called
#generate service pricipal id and password using below command under shell script file ACR_NAME=$1 SERVICE_PRINCIPAL_NAME=$2 ROLE=$3 if [ -z "$ROLE" ] then ROLE=acrpush fi # Obtain the full registry ID for subsequent command args ACR_REGISTRY_ID=$(az acr show --name $ACR_NAME --query id --output tsv) # Create the service principal with rights scoped to the registry. # Default permissions are for docker pull access. Modify the '--role' SP_PASSWD=$(az ad sp create-for-rbac --name http://$SERVICE_PRINCIPAL_NAME --scopes $ACR_REGISTRY_ID --role $ROLE --query password --output tsv) SP_APP_ID=$(az ad sp show --id http://$SERVICE_PRINCIPAL_NAME --query appId --output tsv) # Output the service principal's credentials; use these in your services and # applications to authenticate to the container registry. echo "Service principal ID: $SP_APP_ID" echo "Service principal password: $SP_PASSWD"
acr.shfile passing the following variables.
ACR_NAME- Name of your container registry in Azure. (eg: myapp.azurecr.io)
SERVICE_PRINCIPAL_NAME- Must be a unique name within your AD tenent. (eg: unique-acr-service-principal)
ROLE- Default permissions for docker pull, push access
acrpull- Pull Only
acrpush- Push and Pull
owner- Push, Pull and assigned Roles
Run the following command. Replace the appropriate values as mentioned above.
sh acr.sh <ACR_NAME> <SERVICE_PRINCIPAL_NAME> <ROLE>
Connecting to Platformer¶
To integrate a new container registry to the Platformer Console,
Navigate to Credentails > Container Registries and click + CREDENTIAL (or Get started if you haven’t added one before)
Select Azure ACR from Container Registry Provider drop down.
Fill in the following fields.
- Registry URL - ACR_NAME of the previous section
- Service Principal ID - Taken from the script output in the previous section
- Service Principal Password - Taken from the script output in the previous section