I've got an app in one resource group and a container reigstry in another. I get 401 errors on the webhooks that are automatically set up in the ACR to tell the webapp that there is a new image. I've got CI set to active in the app. I've got "SCM Basic Auth Publishing Credentials" set to active in the app I've added a role "AcrPull" in the app directed toward the container registry that the ACR is located in. How do i fix this?

401 error webhook fetching image from ACR to webapp

alexander Lindgren 0

I've got an app in one resource group and a container reigstry in another.
I get 401 errors on the webhooks that are automatically set up in the ACR to tell the webapp that there is a new image.
I've got CI set to active in the app.
I've got "SCM Basic Auth Publishing Credentials" set to active in the app
I've added a role "AcrPull" in the app directed toward the container registry that the ACR is located in.

How do i fix this?

Sai Krishna Katakam 140 Reputation points Microsoft Vendor

2024-09-09T23:01:08.6+00:00
Hi alexander Lindgren,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.
The 401 error likely comes from permission issues between your web app and ACR. Try these steps:

Make sure your web app's Managed Identity or Service Principal has the AcrPull role in the ACR's resource group.

Enable Managed Identity go to Web App > Identity, enable System Assigned Managed Identity, and assign the AcrPull role in ACR.

Ensure your web app is correctly linked to ACR under Container settings.

Verify webhooks in ACR under Webhooks. If needed, delete and recreate them.

For more details, please check this documents Registry authentication options - Azure Container Registry | Microsoft Learn, Tutorial: Build and run a custom image in Azure App Service - Azure App Service | Microsoft Learn.

If you have any further queries, do let us know. If the comment is helpful, please click "Upvote"
alexander Lindgren 0 Reputation points

2024-09-10T06:31:45.27+00:00

I've checked all the points above, but still have the same issue, the webhooks don't work.
Sai Krishna Katakam 140 Reputation points Microsoft Vendor

2024-09-10T20:32:14.34+00:00
Hi alexander Lindgren,
Since the issue persists, try these steps:

Check Webhook Logs go to ACR > Webhooks > Logs to see if there's any error message explaining the issue.

Make sure that no firewall or network restrictions are blocking the communication between the web app and ACR, especially if you're using VNET or Private Endpoints.

Recreate the Webhook Delete the current webhook in ACR and recreate it to ensure it's properly configured.

Manual Test push a new image to ACR to manually trigger the webhook and check if it fires correctly.

For more details, please refer to document: Azure Container Registry Webhooks.

If you have any further queries, do let us know. If the comment is helpful, please click "Upvote"
Sai Krishna Katakam 140 Reputation points Microsoft Vendor

2024-09-11T17:15:41.9433333+00:00

Hi alexander Lindgren,

Just checking in to see if you had a chance to see my comment to your question. Please tell us if it was helpful and feel free to reach out to us if you have any queries.

If it was helpful, please click "Upvote" on his post.

Thank You.
Sai Krishna Katakam 140 Reputation points Microsoft Vendor

2024-09-13T00:55:24.56+00:00

Hi alexander Lindgren,

I wanted to check if you had the opportunity to review the information which was provided in my previous posted comment.

If it was helpful, please click "Upvote" on his post to let us know.

Thank You.

Share via

401 error webhook fetching image from ACR to webapp

Your answer