Cannot get tags from Azure Container Registry

[yavorivanov-cw]

Describe the bug
We use AKS with "integrated" ACR, we pull images without the need of pull secrets. But argocd-image-updater cannot get image tags.

time="2025-02-05T12:50:41Z" level=error msg="Could not get tags from registry: Get \"https://myregistry.azurecr.io/v2/my-app/frontend/tags/list\": unauthorized: authentication required, visit https://aka.ms/acr/authorization for more information. CorrelationId: 9ec03127-1ad8-467b-8af4-749e6cf53fa6" alias=frontend application=my-app image_name=my-app/frontend image_tag=latest registry=myregistry.azurecr.io

we get the same error for the second image backend

To Reproduce
Create Application:

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: my-app
  annotations:
    argocd-image-updater.argoproj.io/image-list: backend=myregistry.azurecr.io/my-app/backend:latest,frontend=myregistry.azurecr.io/my-app/frontend:latest
    argocd-image-updater.argoproj.io/frontend.helm.image-tag: frontend.image.tag
    argocd-image-updater.argoproj.io/backend.helm.image-tag: backend.image.tag
    argocd-image-updater.argoproj.io/frontend.update-strategy: digest
    argocd-image-updater.argoproj.io/backend.update-strategy: digest
spec:
  destination:
    namespace: my-app
    server: 'https://kubernetes.default.svc'
  project: my-app
  source:
    repoURL: '[email protected]:some-repo/my-app.git'
    targetRevision: dev
    path: deploy/app
    helm:
      releaseName: my-app
      parameters:
      - name: "backend.image.tag"
        value: "latest"
      parameters:
      - name: "frontend.image.tag"
        value: "latest"
      valueFiles:
          - ../app-values/values-dev.yaml
  syncPolicy:
    automated: {}

Expected behavior
I would expect that argocd-image-updater would be able to find the newest image and update the tags

Additional context
The only way of working was to enable Admin user in ACR and use its credentials in secret. This is not desired solution/workaround, we need to have the admin user disabled.

Version
argocd-image-updater v0.15.2+abc0072

Logs
Please paste any relevant logs here

[chengfang]

Looks same issue as #550

[yavorivanov-cw]

Looks same issue as #550

I already tried the solution with the script but still get the same error as mentioned above. Maybe I am setting wrongly the client-id in the ServiceAccount patch?! There I used the same id that I assigned the AcrPull role. But still not sure if the issue is the same as the user tried to use secret