azure - 使用 terraform 的 ACR 清除任务未按预期工作

Question

如下创建 ACR

resource "azurerm_container_registry" "acr" {
  name                = var.azure_container_registry_name
  resource_group_name = var.resource_group.name
  location            = var.location
}

并清除任务，如下所示

resource "azurerm_container_registry_task" "acr_purge_task" {
  name                  = "scheduledAcrPurgeTask"
  container_registry_id = azurerm_container_registry.acr.id
  platform {
    os           = "Linux"
  }
  encoded_step {
    task_content = <<EOF
    version: v1.1.0
    steps:
      - cmd: acr purge --filter 'REPO:TEST.*' --untagged --ago 10m
        disableWorkingDirectoryOverride: true
        timeout: 3600
    EOF
    context_path = "/dev/null"
  }
  timer_trigger {
    name     = "t1"
    schedule = "*/15 * * * *"
    enabled  = true
  }
}

任务正在成功创建，但运行时出现以下错误

Unable to find image 'acr:latest' locally
docker: Error response from daemon: pull access denied for acr, repository does not exist or may require 'docker login': denied: requested access to the resource is denied.

我不确定为什么要在 acr:latest 中查找图像，因为我将 REPO 维护为我的存储库。

Answer 1

愚蠢的错误我删除了行前的空格

version: v1.1.0
steps:
  - cmd: acr purge --filter 'REPO:TEST.*' --untagged --ago 10m
    disableWorkingDirectoryOverride: true
    timeout: 3600

早些时候

    version: v1.1.0
    steps:
      - cmd: acr purge --filter 'REPO:TEST.*' --untagged --ago 10m
        disableWorkingDirectoryOverride: true
        timeout: 3600

我不明白为什么 terraform 或 Azure 没有提供更好的错误响应。