Azure App Service – on-premies Docker Registry

by default App Service try to connect by public ip addresses? (Outbound Traffic)

Azure App Service instance initiates outbound requests, it uses public IP addresses assigned to the Azure region’s outbound network infrastructure.

• This issue is because of involving a combination of networking, connectivity, and authentication factors.

2023-08-07T07:35:52.906Z ERROR – Image pull failed: Verify docker image configuration and credentials (if using private repository)

Use the below format template upon selecting private registry:

# Use a base image that supports your application (e.g., node, python, etc.)
FROM node:18

# Set the working directory
WORKDIR /app

# Install any dependencies your application needs
# For example, if you're using Node.js, you might copy package.json and run npm install
COPY package*.json ./
RUN npm install

# Set environment variables if needed
# ENV EXAMPLE_VARIABLE=value

# Specify the private repository's URL, image name, and tag
ARG REPOSITORY_URL=<REPOSITORY_URL>
ARG IMAGE_NAME=<IMAGE_NAME>
ARG IMAGE_TAG=<IMAGE_TAG>

# Authenticate to your private repository (if required)
# For example, if using a private Artifactory repository, you might use an authentication token
# RUN echo "<AUTH_TOKEN>" | docker login -u <USERNAME> --password-stdin <REPOSITORY_URL>

# Pull the image from the private repository
RUN docker pull ${REPOSITORY_URL}/${IMAGE_NAME}:${IMAGE_TAG}

# Copy your application's source code
COPY . .

# Start your application
CMD [ "npm", "start" ]

• You enabled VNet Integration and set the WEBSITE_PULL_IMAGE_OVER_VNET app setting to True so by default Azure App Service uses public IP addresses for outbound traffic.

• App Service will try to pull the image over the VNet. However, clear it from your end that whether the Artifactory is accessible through the VNet.

Check that you have selected network security groups as above and also in app service go to settings<Identity<System assigned should be "on."