Search code examples
azureazure-web-app-serviceartifactory

Azure App Service - on-premies Docker Registry


I have a simple problem. I need to configure my App Service to be able to connect to on-premies Artifactory.

In App Service, I set up Deployment Center as a screenshot (URL and the image name are changed)

Deployment Center settings

Additionally, I enabled VNet Integration to VNet which has access to on-premies env. For example, VMs in the same subnet can pull a docker image from Artifactory but App Service can't. Below log with the error.

023-08-07T07:35:20.683Z INFO - Attempting to pull image *URL_ARTIFACTORY_ONPREMIES/IMAGE_NAME*:latest from VNET. 2023-08-07T07:35:52.219Z ERROR - Image pull for *URL_ARTIFACTORY_ONPREMIES/IMAGE_NAME*:latest failed. UnexpectedFaliure 2023-08-07T07:35:52.221Z ERROR - Pulling docker image *URL_ARTIFACTORY_ONPREMIES/IMAGE_NAME*:latest over VNET failed. 2023-08-07T07:35:52.222Z WARN - Image pull failed. Defaulting to local copy if present. 2023-08-07T07:35:52.906Z ERROR - Image pull failed: Verify docker image configuration and credentials (if using private repository)

I set up WEBSITE_PULL_IMAGE_OVER_VNET to True.

My question is: by default App Service try to connect by public ip addresses? (Outbound Traffic)

Networking tab

Please any hints or advice. Thanks.


Solution

  • The issue was resolved by issuing a certificate for Artifactory (on-prem) via global CA.