AWX EE Image from Azure Container Registry

Archives AWX Project
, ,
1

Hello,
I am attempting to use an EE from our Azure Container Registry and I am getting this failure message:

“Error creating pod: container failed to start, ImagePullBackOff”

Which I am assuming means it is not actually downloading the image.

  1. I have configured a container registry credential with my user/password
  2. I have configured an Execution Environment pointing to the image in my acr
    1. I tried with v1 which is the only tag currently existing
    2. I tried with latest tag
    3. I tried without a tag at all
  3. I configured a basic “hello world” template that literally just has a debug task but uses this EE

Is there any documentation of ACR being used? I haven’t been successful in my searching.

When I run from docker on my local computer I have to login to azure via the azure cli before I can download the image, so I assume the core of the issue is getting access to the image registry.

2

Can you check whether you can run any application on your cluster by pulling a docker image? I suspect the interfacing between your cluster and the ACR is broken and it is not able to pull any image. If you are running AKS cluster, please check whether you are able to access the container registry( there is some az ACR command that you can run with managed identity for this).

Regards,
Mani

3

For what it's worth, this is how I configure mine. I use the ansible awx.awx collection to configure awx itself - that way we get the same config for any dev/test instances.

- name: mycompany ACR (for EEs)
awx.awx.tower_credential:
name: mycompany-acr
credential_type: "Container Registry"
state: present
organization: "mycompany"
description: "ACR for pulling EE images"
inputs:
host: "mycompany.azurecr.io"
password: "{{ awx_acr_password }}"
username: "mycompany"
verify_ssl: true

- name: Create Execution Environment
awx.awx.execution_environment:
name: "mycompany awx-ee"
image: "mycompany.azurecr.io/awx-mycompany-ee-prod:7997"
credential: "mycompany-acr"
organization: "mycompany"
pull: always
description: "Standard awx-ee + az cli, winrm, opentelemetry and netaddr"

4

What I figured out was it was an issue with logging in to the registry. I was using my user account, but I think the login process was the issue. I changed it to using a generated access token and it seems to work exactly as expected.

Thanks for the attempted help!