Azure
Private ACR Task behind proxy - unable to configure the proxy on an ACR Task of a Private ACR
What is the problem you're trying to solve For Microsoft Strategic customer based in Belgium
The problem is that customer has an Azure DevOps git repository that can only be accessed through our (non-transparent) proxy but customerprivate ACR needs to be accessed directly by the ACR Task.
When customer does builds of container images on the ACR pool using az acr build customer can pass our proxy settings to the agent (http_proxy, https_proxy and no_proxy) however there is not something for the ACR Tasks.
Describe the solution you'd like Azure to allow to configure the proxy using env variables (http_proxy, https_proxy, no_proxy) when creating/updating an ACR task.
Additional context We are unable to use Azure and hence impacts our potential new deployments on Azure.
@RajanMSoft this is a new feature ask that we need to review. We may need a bit more information about the configuration. Is there a network diagram that you can provide or more details what the connectivity between the Git repo, the ACR and the ACR Tasks is? Are there any VNet configurations, what firewall configurations are created, etc.
CC:// @leodewang
Looping my Microsoft email id
Regards Prasanna
On Tue, Feb 18, 2025 at 8:06 PM Toddy Mladenov @.***> wrote:
@RajanMSoft https://github.com/RajanMSoft this is a new feature ask that we need to review. We may need a bit more information about the configuration. Is there a network diagram that you can provide or more details what the connectivity between the Git repo, the ACR and the ACR Tasks is? Are there any VNet configurations, what firewall configurations are created, etc.
CC:// @leodewang https://github.com/leodewang
— Reply to this email directly, view it on GitHub https://github.com/Azure/acr/issues/818#issuecomment-2666677892, or unsubscribe https://github.com/notifications/unsubscribe-auth/BO6Q5OZ6AV6MSL2D43RL3LD2QOADXAVCNFSM6AAAAABWCYSMXKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRWGY3TOOBZGI . You are receiving this because you were mentioned.Message ID: @.***> [image: toddysm]toddysm left a comment (Azure/acr#818) https://github.com/Azure/acr/issues/818#issuecomment-2666677892
@RajanMSoft https://github.com/RajanMSoft this is a new feature ask that we need to review. We may need a bit more information about the configuration. Is there a network diagram that you can provide or more details what the connectivity between the Git repo, the ACR and the ACR Tasks is? Are there any VNet configurations, what firewall configurations are created, etc.
CC:// @leodewang https://github.com/leodewang
— Reply to this email directly, view it on GitHub https://github.com/Azure/acr/issues/818#issuecomment-2666677892, or unsubscribe https://github.com/notifications/unsubscribe-auth/BO6Q5OZ6AV6MSL2D43RL3LD2QOADXAVCNFSM6AAAAABWCYSMXKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRWGY3TOOBZGI . You are receiving this because you were mentioned.Message ID: @.***>
-- Regards Prasanna
Hello Team
I will ask the customer on this and let you know.
Regards Prasanna
On Tue, Feb 18, 2025 at 8:06 PM Toddy Mladenov @.@.>> wrote:
@RajanMSofthttps://github.com/RajanMSoft this is a new feature ask that we need to review. We may need a bit more information about the configuration. Is there a network diagram that you can provide or more details what the connectivity between the Git repo, the ACR and the ACR Tasks is? Are there any VNet configurations, what firewall configurations are created, etc.
CC:// @leodewanghttps://github.com/leodewang
— Reply to this email directly, view it on GitHubhttps://github.com/Azure/acr/issues/818#issuecomment-2666677892, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BO6Q5OZ6AV6MSL2D43RL3LD2QOADXAVCNFSM6AAAAABWCYSMXKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRWGY3TOOBZGI. You are receiving this because you were mentioned.Message ID: @.@.>> [toddysm]toddysm left a comment (Azure/acr#818)https://github.com/Azure/acr/issues/818#issuecomment-2666677892
@RajanMSofthttps://github.com/RajanMSoft this is a new feature ask that we need to review. We may need a bit more information about the configuration. Is there a network diagram that you can provide or more details what the connectivity between the Git repo, the ACR and the ACR Tasks is? Are there any VNet configurations, what firewall configurations are created, etc.
CC:// @leodewanghttps://github.com/leodewang
— Reply to this email directly, view it on GitHubhttps://github.com/Azure/acr/issues/818#issuecomment-2666677892, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BO6Q5OZ6AV6MSL2D43RL3LD2QOADXAVCNFSM6AAAAABWCYSMXKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRWGY3TOOBZGI. You are receiving this because you were mentioned.Message ID: @.@.>>
-- Regards Prasanna
Dear Colleagues
The customer shared the same, please let me know if it helps. If needed the customer is okay to have a call.
=========================================
Here is some more info. Let me know if more information is needed.
@.***
We use a private ACR with the following network config.
@.***
@.***
We have an agent pool in a dedicated subnet.
@.***
This subnet has the following routing
@.*** @.***
Our firewall is using the 172.22.34.38 and also contains the proxy component. But our proxy is a non-transparent proxy so we need to configure it when we want to send traffic to the internet.
That’s why we start builds on the ACR pool with the following command in Powershell:
az acr build --agent-pool $agentpool --image $image --build-arg HTTP_PROXY=$http_proxy --build-arg HTTPS_PROXY=$http_proxy --build-arg NO_PROXY="$no_proxy" --build-arg http_proxy=$http_proxy --build-arg https_proxy=$http_proxy --build-arg no_proxy="$no_proxy" .
with:
$http_proxy = “http://proxyhubwe.fibe.fortis:8080http://proxyhubwe.fibe.fortis:8080/” # (our proxy) $no_proxy = ‘azurecr.io’
Regards Prasanna Customer Success Account Mgr – Belux Mobile: +32 476 790 311 @.@.>
[Microsoft]
[Twitter]https://twitter.com/Microsoft [Facebook] https://www.facebook.com/Microsoft [Linkedin] https://www.linkedin.com/company/microsoft [Youtube] https://www.youtube.com/user/Microsoft
Next Planned Leave – 4th Feb – 12th Feb The content of this document/email is non-binding and is intended for discussion purposes only -- this document is provided as is -- and should not be interpreted as an offer or commitment on the part of Microsoft Corporation (and/or its affiliates). This document (and/or email) does not change, alter or adapt any existing agreement(s) currently in place between you and Microsoft Corporation (and/or its affiliates). Microsoft Corporation (and/or its affiliates) cannot guarantee the accuracy of any information presented herein. This email may contain confidential information and should not be shared with any third party without the prior written agreement of Microsoft Corporation (and/or its affiliates). If you are not the intended recipient, take no action, contact the sender immediately and delete this email.
From: Prasanna Rajan Sent: Wednesday, February 19, 2025 9:12 AM To: Azure/acr @.> Cc: Azure/acr @.>; Mention @.***> Subject: RE: [EXTERNAL] Re: [Azure/acr] Private ACR Task behind proxy - unable to configure the proxy on an ACR Task of a Private ACR (Issue #818)
Hello Team
I will ask the customer on this and let you know.
Regards Prasanna Customer Success Account Mgr – Belux Mobile: +32 476 790 311 @.@.>
[Microsoft]
[Twitter]https://twitter.com/Microsoft [Facebook] https://www.facebook.com/Microsoft [Linkedin] https://www.linkedin.com/company/microsoft [Youtube] https://www.youtube.com/user/Microsoft
Next Planned Leave – 4th Feb – 12th Feb The content of this document/email is non-binding and is intended for discussion purposes only -- this document is provided as is -- and should not be interpreted as an offer or commitment on the part of Microsoft Corporation (and/or its affiliates). This document (and/or email) does not change, alter or adapt any existing agreement(s) currently in place between you and Microsoft Corporation (and/or its affiliates). Microsoft Corporation (and/or its affiliates) cannot guarantee the accuracy of any information presented herein. This email may contain confidential information and should not be shared with any third party without the prior written agreement of Microsoft Corporation (and/or its affiliates). If you are not the intended recipient, take no action, contact the sender immediately and delete this email.
From: Prasanna Rajan @.@.>> Sent: Wednesday, February 19, 2025 9:11 AM To: Azure/acr @.@.>>; Prasanna Rajan @.@.>> Cc: Azure/acr @.@.>>; Mention @.@.>> Subject: [EXTERNAL] Re: [Azure/acr] Private ACR Task behind proxy - unable to configure the proxy on an ACR Task of a Private ACR (Issue #818)
Looping my Microsoft email id
Regards Prasanna
On Tue, Feb 18, 2025 at 8:06 PM Toddy Mladenov @.@.>> wrote:
@RajanMSofthttps://github.com/RajanMSoft this is a new feature ask that we need to review. We may need a bit more information about the configuration. Is there a network diagram that you can provide or more details what the connectivity between the Git repo, the ACR and the ACR Tasks is? Are there any VNet configurations, what firewall configurations are created, etc.
CC:// @leodewanghttps://github.com/leodewang
— Reply to this email directly, view it on GitHubhttps://github.com/Azure/acr/issues/818#issuecomment-2666677892, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BO6Q5OZ6AV6MSL2D43RL3LD2QOADXAVCNFSM6AAAAABWCYSMXKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRWGY3TOOBZGI. You are receiving this because you were mentioned.Message ID: @.@.>> [toddysm]toddysm left a comment (Azure/acr#818)https://github.com/Azure/acr/issues/818#issuecomment-2666677892
@RajanMSofthttps://github.com/RajanMSoft this is a new feature ask that we need to review. We may need a bit more information about the configuration. Is there a network diagram that you can provide or more details what the connectivity between the Git repo, the ACR and the ACR Tasks is? Are there any VNet configurations, what firewall configurations are created, etc.
CC:// @leodewanghttps://github.com/leodewang
— Reply to this email directly, view it on GitHubhttps://github.com/Azure/acr/issues/818#issuecomment-2666677892, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BO6Q5OZ6AV6MSL2D43RL3LD2QOADXAVCNFSM6AAAAABWCYSMXKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRWGY3TOOBZGI. You are receiving this because you were mentioned.Message ID: @.@.>>
-- Regards Prasanna
This conversation is being tracked directly with the customer over email - closing for now
