Learn how to troubleshoot Azure container instance deployment errors caused by lack of proper permissions on the container registry image. Find out if assigning the AcrPull role to ACR-Tasks-Network can resolve the issue and allow successful deployment using the problematic image.
Table of Contents
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure container registry named Registry1 that contains an image named image1.
You receive an error message when you attempt to deploy a container instance by using image1.
You need to be able to deploy a container instance by using image1.
Solution: You assign the AcrPull role to ACR-Tasks-Network for Registry1.
Does this meet the goal?
A. Yes
B. No
Answer
B. No
Explanation
No, assigning the AcrPull role to ACR-Tasks-Network for Registry1 does not meet the goal of being able to deploy a container instance using image1.
The AcrPull role grants pull permissions to a user, enabling them to pull container images from the registry. However, ACR-Tasks-Network is a virtual network used by ACR Tasks, not a user or service principal that could be granted the AcrPull role.
To resolve the container instance deployment error, you would need to:
- Check that the Azure AD identity (user or service principal) trying to deploy the container instance has been granted at least AcrPull permissions on the Registry1 Azure Container Registry.
- Ensure the container image tag being referenced (image1) actually exists in Registry1. A common issue is using the wrong registry name, image name, or tag.
- Verify the problematic registry image was built and pushed successfully without any errors that could prevent it from being used.
So in summary, the proposed solution of assigning AcrPull to ACR-Tasks-Network is incorrect and would not allow you to successfully deploy a container instance from the image1 container image in Registry1. The permissions need to be granted to the identity doing the deployment instead.
Microsoft AZ-104 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft AZ-104 exam and earn Microsoft AZ-104 certification.