currently In my container app i am using sp based authentication with ACR by providing the username/password like below.

  registry {
    server               = var.acr_registry_name
    username             = var.acr_sp_id
    password_secret_name = "acr-pass"
  }

Now wanted to use the Managed identity authentication. I have code like below. With this getting error

"message":"Failed
to provision revision for container app 'container-app-dev'.
Error details: The following field(s) are either invalid or missing. Field
'configuration.Registries.devacr.azurecr.io.Identity' is
invalid with details: 'Invalid value: \"SystemAssigned\": Managed Identity
does not exist';.."},"startTime":"2025-03-26T11:46:32.5140204"}

It works perfectly well with manual setup but not with terraform code. Any open BUGS or am i missing something.

currently In my container app i am using sp based authentication with ACR by providing the username/password like below.

  registry {
    server               = var.acr_registry_name
    username             = var.acr_sp_id
    password_secret_name = "acr-pass"
  }

Now wanted to use the Managed identity authentication. I have code like below. With this getting error

"message":"Failed
to provision revision for container app 'container-app-dev'.
Error details: The following field(s) are either invalid or missing. Field
'configuration.Registries.devacr.azurecr.io.Identity' is
invalid with details: 'Invalid value: \"SystemAssigned\": Managed Identity
does not exist';.."},"startTime":"2025-03-26T11:46:32.5140204"}

It works perfectly well with manual setup but not with terraform code. Any open BUGS or am i missing something.

• azure
• azure-container-apps
• acr

Share Improve this question Follow edited Mar 28 at 3:38 Vinay B 2,75122 gold badges33 silver badges1212 bronze badges Recognized by Microsoft Azure Collective asked Mar 26 at 12:38 CoderCoder 1711212 bronze badges 0

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 0

After updating code like below, it's started working fine.

  registry {
    server               = var.acr_registry_name
    identity             = "system"
  }

If proper documentation were provided from hashicorp would been better.