Skip to content

feat: add ACR authentication#1014

Merged
xgugeng merged 15 commits intomainfrom
gugeng/acr-auth
Jan 15, 2026
Merged

feat: add ACR authentication#1014
xgugeng merged 15 commits intomainfrom
gugeng/acr-auth

Conversation

@xgugeng
Copy link
Contributor

@xgugeng xgugeng commented Jan 13, 2026

This pull request introduces an anonymous_pull parameter in the pipeline configuration to control whether anonymous pull is used for ACR image pulls, and updates the ACR and AKS cluster settings accordingly.

Latest pipeline run is here.

jasminetMSFT and others added 3 commits January 13, 2026 06:05
## Summary
Updates the `image-pull-n10` pipeline to use the `image-pull` topology
with registry scraping enabled, allowing collection of ACR metadata in
test results.

## Changes
- Changed topology from `cri-resource-consume` to `image-pull`
- Added `scrape_registry: True` to enable ACR metadata collection
- Added `registry_endpoint: acrtelescope.azurecr.io` to use ACR in same
subscription (required for registry scraping)
- Added `containerd_scrape_interval: 15s` parameter

## Test Results
Pipeline link: [#20260112.5 • Add registry_endpoint for
same-subscription ACR
scraping](https://dev.azure.com/akstelescope/telescope/_build/results?buildId=48793&view=results)
@xgugeng xgugeng marked this pull request as ready for review January 15, 2026 00:50
@xgugeng xgugeng requested a review from alyssa1303 as a code owner January 15, 2026 00:50
Copilot AI review requested due to automatic review settings January 15, 2026 00:50
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request introduces ACR (Azure Container Registry) authentication control for image-pull scenarios by adding an anonymous_pull parameter that configures whether anonymous pull is enabled or disabled for ACR, and handles the corresponding AKS cluster authentication setup.

Changes:

  • Adds new authentication script that dynamically enables/disables ACR anonymous pull based on the anonymous_pull parameter
  • Integrates ACR authentication step into the image-pull validation workflow
  • Corrects the default registry endpoint domain from akscritelescope.azure.io to akscritelescope.azurecr.io

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 8 comments.

File Description
steps/cloud/azure/authenticate-acr.yml New script that configures ACR anonymous pull settings and attaches ACR to AKS when authentication is needed
steps/topology/image-pull/validate-resources.yml Adds conditional ACR authentication step for Azure cloud deployments
modules/python/clusterloader2/cri/config/config.yaml Fixes registry endpoint domain to use correct azurecr.io format

@xgugeng xgugeng merged commit 5d2765b into main Jan 15, 2026
9 checks passed
@xgugeng xgugeng deleted the gugeng/acr-auth branch January 15, 2026 02:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants