Use terraform to push docker image to azure container registry

Question

I am using terraform to provision the infrastructure for my project in Azure.

Part of the infrastructure is a container registry to store the docker images that will be used by kubernates. Since at the moment everything is provisioned using terraform I am trying to build and push the images too. I found the kreuzwerker/docker provider that maybe can do the job.

For the moment I have this code:

provider "docker" {
  registry_auth {
    address  = azurerm_container_registry.example.login_server
    username = azurerm_container_registry.example.admin_username
    password = azurerm_container_registry.example.admin_password
  }
}

resource "docker_registry_image" "example" {
  name          = "example"
  keep_remotely = false

  build {
    context    = path.cwd
    dockerfile = "Dockerfile"
  }
}

It seems like the image has been build but when it comes to push it to the registry I get this error:

╷
│ Error: resourceDockerRegistryImageCreate: Unable to get authConfig for registry: no auth config found for registry registry-1.docker.io in auth configs: map[string]types.AuthConfig{"***.azurecr.io":types.AuthConfig{Username:"***", Password:"***", Auth:"", Email:"", ServerAddress:"https://***.azurecr.io", IdentityToken:"", RegistryToken:""}}
│ 
│   with docker_registry_image.backend,
│   on docker.tf line 1, in resource "docker_registry_image" "backend":
│    1: resource "docker_registry_image" "backend" {
│ 
╵

I think it's trying to push to registry-1.docker.io but that's not the correct registry. So I tried

provider "docker" {
  host = azurerm_container_registry.example.login_server

  registry_auth {
    address  = azurerm_container_registry.example.login_server
    username = azurerm_container_registry.example.admin_username
    password = azurerm_container_registry.example.admin_password
  }
}

But then I get this error:

╷
│ Error: Error initializing Docker client: unable to parse docker host `***.azurecr.io`
│ 
│   with provider["registry.terraform.io/kreuzwerker/docker"],
│   on provider.tf line 8, in provider "docker":
│    8: provider "docker" {
│ 
╵

How can I use this provider to push the image to the correct ACR?

You need to name the image properly. "example" will be pushed to dockerhub. Prepend the name of your ACR registry. — fredrik, Oct 09 '22 at 09:32
See https://learn.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli?tabs=azure-cli — fredrik, Oct 09 '22 at 09:32
You are right! Changing `docker_registry_image`'s `name` to "${azurerm_container_registry.example.login_server}/example" worked! Thanks very much! — chenny, Oct 09 '22 at 11:01
Good that it was that. I'll type it up as an answer and you can accept it to close the QnA — fredrik, Oct 09 '22 at 14:55

fredrik · Accepted Answer · 2023-06-09T21:09:24.557

3

For docker images, the name if the image actually defines which registry will be used to push the image to (or fetch it from). So when you define the image name to be example, it will by default go to DockerHub.

In order to send the image to your own registry, wherever that may be, the registry domain must be prepended to the image name, as described here.

In an example taken from the link above, mcr.microsoft.com/oss/nginx/nginx:1.15.5-alpine would be pushed to the registry mcr.microsoft.com instead of DockerHub.

edited Jun 09 '23 at 21:09

answered Oct 09 '22 at 14:58

fredrik

6,483
3
35
45

Do you also know how the `docker_registry_image.name` should look like to work with AWS ECR? I tried these variants and I get different errors: `.dkr.ecr..amazonaws.com/:latest`: Unable to create image, image not found: unable to get digest: Got bad response from registry: 404 Not Found (but the image is created), `.dkr.ecr..amazonaws.com//:latest`: "Error pushing docker image: Error pushing image: EOF" – chenny Oct 19 '22 at 12:09
1

I figure it out. For AWS, `address` in the provider config has to be `.dkr.ecr..amazonaws.com`, NOT `.dkr.ecr..amazonaws.com/`. About the image name, .dkr.ecr..amazonaws.com/:` is the correct syntax. – chenny Oct 19 '22 at 12:40

Use terraform to push docker image to azure container registry

1 Answers1

Linked