You are deploying a containerized application to Azure Container Apps. The container image is hosted in a private Azure Container Registry (ACR). Which two methods can you use to configure the Container App to authenticate and pull the image from the private registry? (Select two.)
- Enable a Managed Identity on the Container App and assign it the AcrPull role on the Azure Container Registry.Answer
- Enable the admin user account on the Azure Container Registry and configure the registry credentials directly in the Container App settings.Answer
- CConfigure the container startup command to execute the 'az acr login' CLI command at runtime.
- DConfigure a System-Assigned Managed Identity on the Azure Container Registry and grant it owner permissions over the Container App environment.
Answer
Enable a Managed Identity on the Container App and assign it the AcrPull role, or enable the admin user account on the Azure Container Registry and configure the credentials in the Container App.
To pull images from a private Azure Container Registry, Azure Container Apps supports either enabling a managed identity on the Container App with the AcrPull role, or using registry credentials (admin user credentials) stored as secrets in the Container App.
Step-by-Step Solution
Key Concept
Azure Container Apps private registry authentication methods