使用Terraform部署ACI时无法访问ACR镜像：InaccessibleImage错误

AI 小北

2026-6-24

使用Terraform部署Azure容器实例（ACI）时无法访问Azure容器注册表（ACR）

报错信息

│ Error: creating Container Group (Subscription: "redacted"
│ Resource Group Name: "myresourcegoup"
│ Container Group Name: "mycontainergroup): performing ContainerGroupsCreateOrUpdate: containerinstance.ContainerInstanceClient#ContainerGroupsCreateOrUpdate: Failure sending request: StatusCode=0 -- Original Error: Code="InaccessibleImage" Message="The image 'mycompany.azurecr.io/myimage:latest' in container group 'mycontainergroup' is not accessible. Please check the image and registry credential."

可复现问题的最小Terraform代码

resource "azurerm_container_group" "generic" {
  name                = local.aci_name
  location            = var.location
  resource_group_name = "myresourcegroup"
  os_type             = "Linux"
  ip_address_type     = "None"  # Specifies that no IP is assigned

  identity {
    type         = "UserAssigned"
    # real deal has the identity coming from previous steps but fails even like this
    identity_ids = ["/subscriptions/redacted/resourceGroups/myresourcegrouo/providers/Microsoft.ManagedIdentity/userAssignedIdentities/myidentity"]

  }
  container {
    name   = local.aci_name
    image  = "mycompany.azurecr.io/myimage:latest"
    cpu    = "0.5"
    memory = "1.5"
  }
  # No ports block needed since no network access is required
}