Add ACR pull role assignment for staging slot

SSWConsulting · Nov 21, 2023 · fc8690a · fc8690a
1 parent 2267ddb
commit fc8690a
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/infra/appService.bicep b/infra/appService.bicep
@@ -186,6 +186,16 @@ resource appServiceAcrPullRoleAssignment 'Microsoft.Authorization/roleAssignment
   }
 }
 
+resource stagingSlotAcrPullRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
+  scope: acr
+  name: guid(acr.id, stagingSlot.id, acrPullRoleDefinitionId)
+  properties: {
+    principalId: stagingSlot.identity.principalId
+    roleDefinitionId: acrPullRoleDefinitionId
+    principalType: 'ServicePrincipal'
+  }
+}
+
 
 module kvAppRoleAssignment 'keyVaultRoleAssignment.bicep' = {
   name: 'kvAppRoleAssignment-${now}'