azure-managed-identityazure-container-registryazure-batchazure-batch-account

Azure Batch Pool with ACR fails to fetch image

I am creating Azure Batch service. I have my code in a docker image that is stored in Azure Container Registry, ACR. To access my ACR repositor I have created a user managed identity and assigned the acrPull role.

When I create a Pool from the Azure Portal, I choose "custom Container configuration" and then enter the Registry server. But for some reason there are no identities listed in the Identity reference dropdown. I can confirm that I have multiple user assigned managed identities.

I used the Registry username and Password which worked as expected.

Is there anything else that need to be done first to be able to use a user assigned managed identity? Any help is greatly appreciated.

Solution

  • I initially placed a Docker image in the Azure Container Registry (ACR). After that, I created a User-Assigned Managed Identity (UAMI) and assigned the AcrPull role to this identity in the ACR by navigating to IAM → Add role assignment.
    enter image description here

    I opened my Batch account, navigated to Identity, added the User-Assigned Managed Identity (UAMI) I created, and saved the changes.
    enter image description here

    After that, I tried to create a pool, selected the Image Type as Custom Image – Azure Compute Gallery, and set the Container Configuration to Custom.

    enter image description here
    I tried to select the Managed Identity under Identity Reference, but I couldn’t select it from the dropdown.
    enter image description here
    After that, I selected User-Assigned Identity, added the identity I created, and also selected Custom for the Container Configuration.

    enter image description here

    I was able to select my User-Assigned Identity instead of using a username and password.

    enter image description here