Helm Registry Login to ACR

user_8139922 0
Viewed 5299

I am trying to use an OCI Registry (ACR) to store my helm charts. I have found ways to push and pull my charts but I cannot login to the registry in an OCI native way.

At the moment I can log in via: az acr login --name myacr

I want to use helm registry login myacr.azurecr.io but this fails with

Error: Get https://myacr.azurecr.io/v2/: unauthorized: Application not registered with AAD.

What does this mean? Do I need to perform some setup between AAD and ACR?

Update

When I try to helm registry login with my user account (user name as name and password as password) from AAD I get the error above.

If I try to login with a service principal it works.

If I try to log in with the 00000000-0000-0000-0000-000000000000 account from this method, that also works.

I suspect there is something additional that needs to be done with user accounts but I am not sure what that is.

azure-container-registry kubernetes-helm
2 Answers

The issue you met is the problem with the authentication type. Here shows you all the available authentication methods, but it does not contain the user account. It means it does not support currently. And right now, the controllable authentication way is the service principal. You can only grant it with the appropriate permission.

user_97739370
user_107100760
Related