Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

acr-env not pushing to Azure container registry in China #3369

Open
maxmantz opened this issue Dec 2, 2024 · 0 comments
Open

acr-env not pushing to Azure container registry in China #3369

maxmantz opened this issue Dec 2, 2024 · 0 comments

Comments

@maxmantz
Copy link

maxmantz commented Dec 2, 2024

Actual behavior
We try to use the acr-env method to push an image to an Azure container registry in China. However, the login defaults to the .well-known auth configuration for the Azure global cloud where the tenant cannot be found:
This is the error message:

error checking push permissions -- make sure you entered the correct tag name, and that you are authenticated correctly, and try again: checking push permission for "{redacted}.azurecr.cn/{redacted}:latest": resolving authorization for {redacted}.azurecr.cn failed: error getting credentials - err: exit status 1, out: `failed to acquire refresh token error refreshing sp token - adal: Refresh request failed. Status Code = '400'. Response body: {"error":"invalid_request","error_description":"AADSTS90002: Tenant '{redacted}' not found. Check to make sure you have the correct tenant ID and are signing into the correct cloud. Check with your subscription administrator, this may happen if there are no active subscriptions for the tenant. Trace ID: 8787618f-c2be-42e0-a757-9a230ba35200 Correlation ID: 0b6baa5f-9178-4f79-994f-79bc4a423cfe Timestamp: 2024-12-02 16:24:36Z","error_codes":[90002],"timestamp":"2024-12-02 16:24:36Z","trace_id":"8787618f-c2be-42e0-a757-9a230ba35200","correlation_id":"0b6baa5f-9178-4f79-994f-79bc4a423cfe","error_uri":"https://login.microsoftonline.com/error?code=90002"} Endpoint https://login.microsoftonline.com/{redacted}/oauth2/token?api-version=1.0

Expected behavior
We would like to see an option to push to the Azure China cloud instead of the global cloud.

To Reproduce
Steps to reproduce the behavior:

  1. Setup a container registry in Azure China
  2. Configure kaniko with acr-env and environment variables for China cloud
  3. See the error message above.

Thank you for your awesome project!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant