az acr import has wrong reference to the container registry when it fails #31412
Description
Describe the bug
Hello!,
While trying to run az acr import between 2 Azure Container Registries which are both restricted to only access via private endpoints, the command fails and reports an incorrect source as the destination.
Related command
az acr import --name destinationacr--source sourceacr.azurecr.io --image sourceimage:latest --password "$(accessToken)" --force
Errors
2025-05-06T10:39:04.0042237Z ERROR: (InvalidParameters) Operation registries-4cb6415b-2a66-11f0-bd28-6045bd04b0ac failed. Resource /subscriptions/97df02ec-642b-49da-a4ff-04d3657fd32b/resourceGroups/destination/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {"errors":[{"code":"DENIED","message":"client with IP \u002720.62.128.3\u0027 is not allowed access. Refer https://aka.ms/acr/firewall to grant access. CorrelationId: 4cb6415b-2a66-11f0-bd28-6045bd04b0ac"}]}
2025-05-06T10:39:04.0043456Z Code: InvalidParameters
2025-05-06T10:39:04.0044336Z Message: Operation registries-4cb6415b-2a66-11f0-bd28-6045bd04b0ac failed. Resource /subscriptions/97df02ed-AAAA-BBBB-CCCC-04d3657fd32b/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {"errors":[{"code":"DENIED","message":"client with IP \u002720.62.128.3\u0027 is not allowed access. Refer https://aka.ms/acr/firewall to grant access. CorrelationId: 4cb6415b-2a66-11f0-bd28-6045bd04b0ac"}]}
Issue script & Debug output
2025-05-06T11:01:49.3114630Z DEBUG: cli.knack.cli: Command arguments: ['acr', 'import', '--name', 'destinationacr', '--source', 'sourceacr.azurecr.io/sourceimage:latest', '--image', 'destinationimage:latest', '--password', '*** '--force', '--debug']
2025-05-06T11:01:49.3115518Z DEBUG: cli.knack.cli: __init__ debug log:
2025-05-06T11:01:49.3118535Z Cannot enable color.
2025-05-06T11:01:49.3119153Z DEBUG: cli.knack.cli: Event: Cli.PreExecute []
2025-05-06T11:01:49.3137145Z DEBUG: cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x00000205908D3240>, <function OutputProducer.on_global_arguments at 0x0000020590A700E0>, <function CLIQuery.on_global_arguments at 0x0000020590A914E0>]
2025-05-06T11:01:49.3138129Z DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
2025-05-06T11:01:49.3138590Z DEBUG: cli.azure.cli.core: Modules found from index for 'acr': ['azure.cli.command_modules.acr']
2025-05-06T11:01:49.3139012Z DEBUG: cli.azure.cli.core: Loading command modules:
2025-05-06T11:01:49.3139425Z DEBUG: cli.azure.cli.core: Name Load Time Groups Commands
2025-05-06T11:01:49.7505603Z DEBUG: cli.azure.cli.core: acr 0.437 36 149
2025-05-06T11:01:49.7506389Z DEBUG: cli.azure.cli.core: Total (1) 0.437 36 149
2025-05-06T11:01:49.7515026Z DEBUG: cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
2025-05-06T11:01:49.7518418Z DEBUG: cli.azure.cli.core: Loading extensions:
2025-05-06T11:01:49.7518960Z DEBUG: cli.azure.cli.core: Name Load Time Groups Commands Directory
2025-05-06T11:01:49.7519380Z DEBUG: cli.azure.cli.core: Total (0) 0.000 0 0
2025-05-06T11:01:49.7524089Z DEBUG: cli.azure.cli.core: Loaded 36 groups, 149 commands.
2025-05-06T11:01:49.7524863Z DEBUG: cli.azure.cli.core: Found a match in the command table.
2025-05-06T11:01:49.7525262Z DEBUG: cli.azure.cli.core: Raw command : acr import
2025-05-06T11:01:49.7525659Z DEBUG: cli.azure.cli.core: Command table: acr import
2025-05-06T11:01:49.7527099Z DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x0000020592D472E0>]
2025-05-06T11:01:49.7527669Z DEBUG: cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'D:\a\_temp\.azclitask\commands\2025-05-06.11-01-49.acr_import.5828.log'.
2025-05-06T11:01:49.7528241Z INFO: az_command_data_logger: command args: acr import --name {} --source {} --image {} --password {} --force --debug
2025-05-06T11:01:49.7528933Z DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x0000020592D7BBA0>]
2025-05-06T11:01:49.8709581Z DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
2025-05-06T11:01:49.8710508Z DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x0000020592DA63E0>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x0000020592DA6520>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x0000020592DA65C0>]
2025-05-06T11:01:49.8721962Z DEBUG: cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
2025-05-06T11:01:49.8722594Z DEBUG: cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
2025-05-06T11:01:49.8730199Z DEBUG: cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x0000020590A70180>, <function CLIQuery.handle_query_parameter at 0x0000020590A91580>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x0000020592DA6480>]
2025-05-06T11:01:49.8736800Z DEBUG: cli.azure.cli.core.commands.client_factory: Getting management service client client_type=ContainerRegistryManagementClient
2025-05-06T11:01:49.8915927Z DEBUG: cli.azure.cli.core.auth.persistence: build_persistence: location='D:\\a\\_temp\\.azclitask\\service_principal_entries.bin', encrypt=True
2025-05-06T11:01:49.8983785Z DEBUG: cli.azure.cli.core.auth.persistence: build_persistence: location='D:\\a\\_temp\\.azclitask\\msal_token_cache.bin', encrypt=True
2025-05-06T11:01:49.8989852Z DEBUG: cli.azure.cli.core.auth.binary_cache: load: D:\a\_temp\.azclitask\msal_http_cache.bin
2025-05-06T11:01:49.8997152Z DEBUG: urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
2025-05-06T11:01:49.9000705Z DEBUG: msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY
2025-05-06T11:01:49.9006272Z DEBUG: msal.authority: openid_config("https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
2025-05-06T11:01:49.9008647Z DEBUG: msal.application: Broker enabled? None
2025-05-06T11:01:50.0151068Z DEBUG: cli.azure.cli.core.commands.client_factory: Getting management service client client_type=ResourceManagementClient
2025-05-06T11:01:50.0163542Z DEBUG: urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
2025-05-06T11:01:50.0181059Z DEBUG: msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY
2025-05-06T11:01:50.0184975Z DEBUG: msal.authority: openid_config("https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
2025-05-06T11:01:50.0187190Z DEBUG: msal.application: Broker enabled? None
2025-05-06T11:01:50.0366904Z DEBUG: cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
2025-05-06T11:01:50.0367617Z DEBUG: cli.azure.cli.core.auth.msal_credentials: ServicePrincipalCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], kwargs={}
2025-05-06T11:01:50.0378380Z DEBUG: msal.application: Cache hit an AT
2025-05-06T11:01:50.0379000Z DEBUG: msal.telemetry: Generate or reuse correlation_id: 5c2d9c81-c69c-4fa4-b494-f51f74c5be39
2025-05-06T11:01:50.0384622Z DEBUG: cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resources?$filter=resourceType%20eq%20%27Microsoft.ContainerRegistry%2Fregistries%27&api-version=2022-09-01'
2025-05-06T11:01:50.0385355Z DEBUG: cli.azure.cli.core.sdk.policies: Request method: 'GET'
2025-05-06T11:01:50.0386048Z DEBUG: cli.azure.cli.core.sdk.policies: Request headers:
2025-05-06T11:01:50.0386475Z DEBUG: cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
2025-05-06T11:01:50.0386918Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '823586b6-2a69-11f0-9e92-002248a61875'
2025-05-06T11:01:50.0387398Z DEBUG: cli.azure.cli.core.sdk.policies: 'CommandName': 'acr import'
2025-05-06T11:01:50.0387978Z DEBUG: cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --source --image --password --force --debug'
2025-05-06T11:01:50.0388571Z DEBUG: cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-2022Server-10.0.20348-SP0) VSTS_2e9898bd-0f04-47ec-9eb2-039304dae064_build_97_0'
2025-05-06T11:01:50.0389154Z DEBUG: cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
2025-05-06T11:01:50.0389546Z DEBUG: cli.azure.cli.core.sdk.policies: Request body:
2025-05-06T11:01:50.0389929Z DEBUG: cli.azure.cli.core.sdk.policies: This request has no body
2025-05-06T11:01:50.0411483Z DEBUG: urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
2025-05-06T11:01:50.1597054Z DEBUG: urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resources?$filter=resourceType%20eq%20%27Microsoft.ContainerRegistry%2Fregistries%27&api-version=2022-09-01 HTTP/1.1" 200 3478
2025-05-06T11:01:50.1606791Z DEBUG: cli.azure.cli.core.sdk.policies: Response status: 200
2025-05-06T11:01:50.1607397Z DEBUG: cli.azure.cli.core.sdk.policies: Response headers:
2025-05-06T11:01:50.1607911Z DEBUG: cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
2025-05-06T11:01:50.1608335Z DEBUG: cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
2025-05-06T11:01:50.1608770Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Length': '3478'
2025-05-06T11:01:50.1610276Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
2025-05-06T11:01:50.1610795Z DEBUG: cli.azure.cli.core.sdk.policies: 'Expires': '-1'
2025-05-06T11:01:50.1611207Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
2025-05-06T11:01:50.1611684Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
2025-05-06T11:01:50.1612151Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'cacde068-b708-4b90-9fb9-694d052bdb61'
2025-05-06T11:01:50.1612635Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'cacde068-b708-4b90-9fb9-694d052bdb61'
2025-05-06T11:01:50.1613200Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'SOUTHCENTRALUS:20250506T110150Z:cacde068-b708-4b90-9fb9-694d052bdb61'
2025-05-06T11:01:50.1613723Z DEBUG: cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
2025-05-06T11:01:50.1614176Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
2025-05-06T11:01:50.1614610Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
2025-05-06T11:01:50.1615088Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 20F5BF9C4CE1431FA347B829A93946AB Ref B: SN4AA2022302031 Ref C: 2025-05-06T11:01:50Z'
2025-05-06T11:01:50.1615601Z DEBUG: cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 06 May 2025 11:01:50 GMT'
2025-05-06T11:01:50.1616024Z DEBUG: cli.azure.cli.core.sdk.policies: Response content:
2025-05-06T11:01:50.1619786Z DEBUG: cli.azure.cli.core.sdk.policies: {"value":[{"id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr","name":"destinationacr","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","tags":{},"systemData":{"createdBy":"aa@bb.onmicrosoft.com","createdByType":"User","createdAt":"2024-01-25T10:38:51.5450727Z","lastModifiedBy":"***","lastModifiedByType":"Application","lastModifiedAt":"2025-04-29T10:59:07.33346Z"}},{"id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/testacr/providers/Microsoft.ContainerRegistry/registries/testacr","name":"testacr","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","tags":{},"systemData":{"createdBy":"aa@bb.onmicrosoft.com","createdByType":"User","createdAt":"2024-01-25T11:09:48.04419Z","lastModifiedBy":"***","lastModifiedByType":"Application","lastModifiedAt":"2025-04-29T12:38:44.0562904Z"}},{"id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev001/providers/Microsoft.ContainerRegistry/registries/testonly","name":"testonly","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Basic","tier":"Basic"},"location":"eastus","tags":{},"systemData":{"createdBy":"bb@cc.dd","createdByType":"User","createdAt":"2024-07-09T19:39:10.4499496Z","lastModifiedBy":"bb@cc.dd","lastModifiedByType":"User","lastModifiedAt":"2024-07-09T19:39:10.4499496Z"}},{"id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev-005/providers/Microsoft.ContainerRegistry/registries/acr005","name":"acr005","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","tags":{},"systemData":{"createdBy":"ee@bb.com","createdByType":"User","createdAt":"2024-10-30T13:32:45.3258416Z","lastModifiedBy":"***","lastModifiedByType":"Application","lastModifiedAt":"2025-03-18T11:23:51.0687366Z"}},{"id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/demo01SharedApp-mrg/providers/Microsoft.ContainerRegistry/registries/demo1tstshrsvcacr01","name":"demo1tstshrsvcacr01","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","tags":{},"systemData":{"createdBy":"ba4bc2bd-843f-4d61-9d33-199178eae34e","createdByType":"Application","createdAt":"2025-04-17T17:44:56.6394916Z","lastModifiedBy":"ba4bc2bd-843f-4d61-9d33-199178eae34e","lastModifiedByType":"Application","lastModifiedAt":"2025-04-17T18:16:57.960633Z"}},{"id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/managedappops002-shared/providers/Microsoft.ContainerRegistry/registries/tstacr","name":"tstacr","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","tags":{},"systemData":{"createdBy":"ba4bc2bd-843f-4d61-9d33-199178eae34e","createdByType":"Application","createdAt":"2025-04-29T07:18:52.8279054Z","lastModifiedBy":"ba4bc2bd-843f-4d61-9d33-199178eae34e","lastModifiedByType":"Application","lastModifiedAt":"2025-04-29T07:18:52.8279054Z"}}]}
2025-05-06T11:01:50.1626999Z DEBUG: cli.azure.cli.core.commands.client_factory: Getting management service client client_type=ContainerRegistryManagementClient
2025-05-06T11:01:50.1640233Z DEBUG: urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
2025-05-06T11:01:50.1640985Z DEBUG: msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY
2025-05-06T11:01:50.1645493Z DEBUG: msal.authority: openid_config("https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/kerberos', 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
2025-05-06T11:01:50.1647958Z DEBUG: msal.application: Broker enabled? None
2025-05-06T11:01:50.1656856Z DEBUG: cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
2025-05-06T11:01:50.1657539Z DEBUG: cli.azure.cli.core.auth.msal_credentials: ServicePrincipalCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], kwargs={}
2025-05-06T11:01:50.1659384Z DEBUG: msal.application: Cache hit an AT
2025-05-06T11:01:50.1660623Z DEBUG: msal.telemetry: Generate or reuse correlation_id: 2a04df30-083e-40ab-935e-331393f1026f
2025-05-06T11:01:50.1665604Z DEBUG: cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr?api-version=2023-11-01-preview'
2025-05-06T11:01:50.1666404Z DEBUG: cli.azure.cli.core.sdk.policies: Request method: 'GET'
2025-05-06T11:01:50.1667018Z DEBUG: cli.azure.cli.core.sdk.policies: Request headers:
2025-05-06T11:01:50.1667448Z DEBUG: cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
2025-05-06T11:01:50.1667894Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '823586b6-2a69-11f0-9e92-002248a61875'
2025-05-06T11:01:50.1668352Z DEBUG: cli.azure.cli.core.sdk.policies: 'CommandName': 'acr import'
2025-05-06T11:01:50.1668796Z DEBUG: cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --source --image --password --force --debug'
2025-05-06T11:01:50.1669398Z DEBUG: cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-2022Server-10.0.20348-SP0) VSTS_2e9898bd-0f04-47ec-9eb2-039304dae064_build_97_0'
2025-05-06T11:01:50.1669925Z DEBUG: cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
2025-05-06T11:01:50.1670338Z DEBUG: cli.azure.cli.core.sdk.policies: Request body:
2025-05-06T11:01:50.1670728Z DEBUG: cli.azure.cli.core.sdk.policies: This request has no body
2025-05-06T11:01:50.1682221Z DEBUG: urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
2025-05-06T11:01:50.3565637Z DEBUG: urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr?api-version=2023-11-01-preview HTTP/1.1" 200 2290
2025-05-06T11:01:50.3573416Z DEBUG: cli.azure.cli.core.sdk.policies: Response status: 200
2025-05-06T11:01:50.3574000Z DEBUG: cli.azure.cli.core.sdk.policies: Response headers:
2025-05-06T11:01:50.3574908Z DEBUG: cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
2025-05-06T11:01:50.3575326Z DEBUG: cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
2025-05-06T11:01:50.3575749Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Length': '2290'
2025-05-06T11:01:50.3576173Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
2025-05-06T11:01:50.3576725Z DEBUG: cli.azure.cli.core.sdk.policies: 'Expires': '-1'
2025-05-06T11:01:50.3577168Z DEBUG: cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
2025-05-06T11:01:50.3577660Z DEBUG: cli.azure.cli.core.sdk.policies: 'api-supported-versions': '2023-11-01-preview'
2025-05-06T11:01:50.3578118Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
2025-05-06T11:01:50.3578601Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
2025-05-06T11:01:50.3579064Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '13822f76-bb5b-432a-b811-d9043bfadb79'
2025-05-06T11:01:50.3579532Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '13822f76-bb5b-432a-b811-d9043bfadb79'
2025-05-06T11:01:50.3580055Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'SOUTHCENTRALUS:20250506T110150Z:13822f76-bb5b-432a-b811-d9043bfadb79'
2025-05-06T11:01:50.3580560Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
2025-05-06T11:01:50.3580974Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
2025-05-06T11:01:50.3581478Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 599432BDCF17478184779C7BFF1737AD Ref B: SN4AA2022304011 Ref C: 2025-05-06T11:01:50Z'
2025-05-06T11:01:50.3581978Z DEBUG: cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 06 May 2025 11:01:49 GMT'
2025-05-06T11:01:50.3582417Z DEBUG: cli.azure.cli.core.sdk.policies: Response content:
2025-05-06T11:01:50.3584856Z DEBUG: cli.azure.cli.core.sdk.policies: {"sku":{"name":"Premium","tier":"Premium"},"type":"Microsoft.ContainerRegistry/registries","id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr","name":"destinationacr","location":"eastus","tags":{},"systemData":{"createdBy":"aa@bb.onmicrosoft.com","createdByType":"User","createdAt":"2024-01-25T10:38:51.5450727+00:00","lastModifiedBy":"zz@bb.com","lastModifiedByType":"User","lastModifiedAt":"2025-05-04T18:51:47.9235262+00:00"},"properties":{"loginServer":"destinationacr.azurecr.io","creationDate":"2024-01-25T10:38:51.5450727Z","provisioningState":"Succeeded","adminUserEnabled":false,"networkRuleSet":{"defaultAction":"Deny","ipRules":[{"action":"Allow","value":"106.213.83.201"}]},"policies":{"quarantinePolicy":{"status":"disabled"},"trustPolicy":{"type":"Notary","status":"disabled"},"retentionPolicy":{"days":7,"lastUpdatedTime":"2025-04-29T10:59:07.3951924+00:00","status":"disabled"},"exportPolicy":{"status":"enabled"},"azureADAuthenticationAsArmPolicy":{"status":"enabled"},"softDeletePolicy":{"retentionDays":7,"lastUpdatedTime":"2025-04-29T10:59:07.3952441+00:00","status":"disabled"}},"encryption":{"status":"disabled"},"dataEndpointEnabled":false,"dataEndpointHostNames":["destinationacr.eastus.data.azurecr.io"],"privateEndpointConnections":[{"type":"Microsoft.ContainerRegistry/registries/privateEndpointConnections","id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr/privateEndpointConnections/destinationacr.f169e62452df41279d0ce7b3ed58d626","name":"destinationacr.f169e62452df41279d0ce7b3ed58d626","properties":{"privateEndpoint":{"id":"/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.Network/privateEndpoints/pveacr001"},"privateLinkServiceConnectionState":{"status":"Approved","description":"Auto-Approved"},"provisioningState":"Succeeded"}}],"publicNetworkAccess":"Enabled","networkRuleBypassOptions":"AzureServices","zoneRedundancy":"Disabled","anonymousPullEnabled":false,"metadataSearch":"Disabled"}}
2025-05-06T11:01:50.3627225Z DEBUG: cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
2025-05-06T11:01:50.3632007Z DEBUG: cli.azure.cli.core.auth.msal_credentials: ServicePrincipalCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], kwargs={}
2025-05-06T11:01:50.3632626Z DEBUG: msal.application: Cache hit an AT
2025-05-06T11:01:50.3633046Z DEBUG: msal.telemetry: Generate or reuse correlation_id: 345a4319-6428-4074-ad06-989ecec205a3
2025-05-06T11:01:50.3633630Z DEBUG: cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr/importImage?api-version=2023-11-01-preview'
2025-05-06T11:01:50.3634205Z DEBUG: cli.azure.cli.core.sdk.policies: Request method: 'POST'
2025-05-06T11:01:50.3634579Z DEBUG: cli.azure.cli.core.sdk.policies: Request headers:
2025-05-06T11:01:50.3634938Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
2025-05-06T11:01:50.3635313Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Length': '1709'
2025-05-06T11:01:50.3635696Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '823586b6-2a69-11f0-9e92-002248a61875'
2025-05-06T11:01:50.3636102Z DEBUG: cli.azure.cli.core.sdk.policies: 'CommandName': 'acr import'
2025-05-06T11:01:50.3636513Z DEBUG: cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --source --image --password --force --debug'
2025-05-06T11:01:50.3637035Z DEBUG: cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-2022Server-10.0.20348-SP0) VSTS_2e9898bd-0f04-47ec-9eb2-039304dae064_build_97_0'
2025-05-06T11:01:50.3637496Z DEBUG: cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
2025-05-06T11:01:50.3637858Z DEBUG: cli.azure.cli.core.sdk.policies: Request body:
2025-05-06T11:01:50.3639959Z DEBUG: cli.azure.cli.core.sdk.policies: {"source": {"registryUri": "sourceacr.azurecr.io", "credentials": {"password": "*** "sourceImage": "sourceimage:latest"}, "targetTags": ["destinationimage:latest"], "mode": "Force"}
2025-05-06T11:01:50.3646646Z DEBUG: urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
2025-05-06T11:01:50.7835700Z DEBUG: urllib3.connectionpool: https://management.azure.com:443 "POST /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr/importImage?api-version=2023-11-01-preview HTTP/1.1" 202 0
2025-05-06T11:01:50.7837763Z DEBUG: cli.azure.cli.core.sdk.policies: Response status: 202
2025-05-06T11:01:50.7839945Z DEBUG: cli.azure.cli.core.sdk.policies: Response headers:
2025-05-06T11:01:50.7840967Z DEBUG: cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
2025-05-06T11:01:50.7843643Z DEBUG: cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
2025-05-06T11:01:50.7845235Z DEBUG: cli.azure.cli.core.sdk.policies: 'Expires': '-1'
2025-05-06T11:01:50.7849361Z DEBUG: cli.azure.cli.core.sdk.policies: 'Location': 'https://management.azure.com/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/providers/Microsoft.ContainerRegistry/locations/EASTUS/operationResults/registries-823586b6-2a69-11f0-9e92-002248a61875?api-version=2023-11-01-preview&t=638821261107444829&c=MIIHpTCCBo2gAwIBAgITOgWeMn5lGzFWFOIH_QAEBZ4yfjANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSU5GUkEgQ0EgMDEwHhcNMjUwNDIxMTgxODEzWhcNMjUxMDE4MTgxODEzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3M5cqUFrE-N9ofWv1xYoBwuQmgRY1thdb7P4Ll_QOuQYidglbVh9gucJ1H1Nc1ak7tmTqgMwmM6BPiYj_77yZ2nt3lvFToqmsFom6Xo1gON3S_AYry8sNFvW0-hbW9AQU2BmRv31BctxeciFyuF1B5mO1dLxppVl3KgX-DoImrH4Y7tfffsIFp-iHx5muEJwOoIvTw9AaEcNBiQIeYeDfdwHG8H9sJNsCsrcJACmswu6on_y56MNqcZmMCioP0PReJULZLQjtp_iGxRpiPPXqAfQxgjXuz4xAIlKyjQ1PS59F4uh9baenp4C-w1CEntBeqmtNM5XZ6zdX0Wv6YRckCAwEAAaOCBJIwggSOMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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_PjsurvwwKidileIud8-YzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBALtICJMFo2ghB0pAmgFiQTDnAlivqv97DzZp_k6NDAzoQTnGA5AS700Ssg0uFJOyBwsyLMBNlWAf1rMVMDp6mt1k2NvZLnOPYIfLD0Y673-C0Eg5GLYF-wZ_9lPJgiiP4MsjxTl43wFFoR21F3alM86o79663Y2Ar8XN-Ja8yTFiheTfKk3Pnax9v1uEe34n9fzK6Z2VIJlRo1TJQVESgKWainiCq59-dY92H-UAoraL_pCZa8XsLFtkwymvb7VgRoXQISuBllRZBdBGP6iW3VbmlvL0U7CPk8t3OZQZwNMELDDbsBU0zDc6JCfcyJiBTMBXxeqv67ievhrVlCogL6s&s=UR2rsRniftL1Fg6oxqctTxjIn9M-NcsMptBFhK11_LdV5L-J2d9GVSRfj5j2bQCR9aPa0dHVu0PV2FUQOKFOmzcwpsw1NixvZ-eQ3z5_DWcpc7N0B5iXT7_0rHNO9ggceMDxApxA1vaA1DmApBxwvWtQlCD4TnSNqnJ1l5J-yRHwhjTCnNo6aYS7Ja04-Baq-_roFnC7tXTWSewYCSJ9UiH9zAvnvsQnq7qAU0c2Cr9eLEqw8SW9epSpVdgJKuX18XZjnGGl9eB7cLxIbl_KyYvkVvJit7TNVmphOnBZc_Xzuj8AoYA-lC2AtLibWmX7VlfrzhhtPPWHdecD17NFng&h=8L0NXamVmidTLUAsrbKAPf4b-RZJRnkY9NXQ1A9N4EQ'
2025-05-06T11:01:50.7856668Z DEBUG: cli.azure.cli.core.sdk.policies: 'Retry-After': '10'
2025-05-06T11:01:50.7857304Z DEBUG: cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
2025-05-06T11:01:50.7861234Z DEBUG: cli.azure.cli.core.sdk.policies: 'api-supported-versions': '2017-10-01, 2019-05-01, 2019-12-01-preview, 2020-11-01-preview, 2021-06-01-preview, 2021-08-01-preview, 2021-09-01, 2021-12-01-preview, 2022-02-01-preview, 2022-12-01, 2023-01-01-preview, 2023-06-01-preview, 2023-07-01, 2023-08-01-preview, 2023-11-01-preview, 2024-01-01-preview, 2024-11-01-preview, 2025-03-01-preview, 2025-04-01, 2025-05-01-preview, 2025-09-01-preview'
2025-05-06T11:01:50.7870177Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': 'appId=***,tenantId=AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY,objectId=b9011c20-f674-40b6-a1be-f4869ea0095f/southcentralus/2667d83f-a6fc-446d-ae30-c2533b29810f'
2025-05-06T11:01:50.7870850Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
2025-05-06T11:01:50.7871347Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
2025-05-06T11:01:50.7872053Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'bc5b52ee-0425-43a7-bb09-327777954413'
2025-05-06T11:01:50.7872540Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'bc5b52ee-0425-43a7-bb09-327777954413'
2025-05-06T11:01:50.7873065Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'SOUTHCENTRALUS:20250506T110150Z:bc5b52ee-0425-43a7-bb09-327777954413'
2025-05-06T11:01:50.7873688Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
2025-05-06T11:01:50.7874106Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
2025-05-06T11:01:50.7874619Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 93965779B12B42C7B82F097EF95227FE Ref B: SN4AA2022303045 Ref C: 2025-05-06T11:01:50Z'
2025-05-06T11:01:50.7875121Z DEBUG: cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 06 May 2025 11:01:50 GMT'
2025-05-06T11:01:50.7875549Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Length': '0'
2025-05-06T11:01:50.7875939Z DEBUG: cli.azure.cli.core.sdk.policies: Response content:
2025-05-06T11:01:50.7876340Z DEBUG: cli.azure.cli.core.sdk.policies:
2025-05-06T11:01:50.7880067Z DEBUG: cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/providers/Microsoft.ContainerRegistry/locations/EASTUS/operationResults/registries-823586b6-2a69-11f0-9e92-002248a61875?api-version=2023-11-01-preview&t=638821261107444829&c=MIIHpTCCBo2gAwIBAgITOgWeMn5lGzFWFOIH_QAEBZ4yfjANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSU5GUkEgQ0EgMDEwHhcNMjUwNDIxMTgxODEzWhcNMjUxMDE4MTgxODEzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3M5cqUFrE-N9ofWv1xYoBwuQmgRY1thdb7P4Ll_QOuQYidglbVh9gucJ1H1Nc1ak7tmTqgMwmM6BPiYj_77yZ2nt3lvFToqmsFom6Xo1gON3S_AYry8sNFvW0-hbW9AQU2BmRv31BctxeciFyuF1B5mO1dLxppVl3KgX-DoImrH4Y7tfffsIFp-iHx5muEJwOoIvTw9AaEcNBiQIeYeDfdwHG8H9sJNsCsrcJACmswu6on_y56MNqcZmMCioP0PReJULZLQjtp_iGxRpiPPXqAfQxgjXuz4xAIlKyjQ1PS59F4uh9baenp4C-w1CEntBeqmtNM5XZ6zdX0Wv6YRckCAwEAAaOCBJIwggSOMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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_PjsurvwwKidileIud8-YzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBALtICJMFo2ghB0pAmgFiQTDnAlivqv97DzZp_k6NDAzoQTnGA5AS700Ssg0uFJOyBwsyLMBNlWAf1rMVMDp6mt1k2NvZLnOPYIfLD0Y673-C0Eg5GLYF-wZ_9lPJgiiP4MsjxTl43wFFoR21F3alM86o79663Y2Ar8XN-Ja8yTFiheTfKk3Pnax9v1uEe34n9fzK6Z2VIJlRo1TJQVESgKWainiCq59-dY92H-UAoraL_pCZa8XsLFtkwymvb7VgRoXQISuBllRZBdBGP6iW3VbmlvL0U7CPk8t3OZQZwNMELDDbsBU0zDc6JCfcyJiBTMBXxeqv67ievhrVlCogL6s&s=UR2rsRniftL1Fg6oxqctTxjIn9M-NcsMptBFhK11_LdV5L-J2d9GVSRfj5j2bQCR9aPa0dHVu0PV2FUQOKFOmzcwpsw1NixvZ-eQ3z5_DWcpc7N0B5iXT7_0rHNO9ggceMDxApxA1vaA1DmApBxwvWtQlCD4TnSNqnJ1l5J-yRHwhjTCnNo6aYS7Ja04-Baq-_roFnC7tXTWSewYCSJ9UiH9zAvnvsQnq7qAU0c2Cr9eLEqw8SW9epSpVdgJKuX18XZjnGGl9eB7cLxIbl_KyYvkVvJit7TNVmphOnBZc_Xzuj8AoYA-lC2AtLibWmX7VlfrzhhtPPWHdecD17NFng&h=8L0NXamVmidTLUAsrbKAPf4b-RZJRnkY9NXQ1A9N4EQ'
2025-05-06T11:01:50.7883558Z DEBUG: cli.azure.cli.core.sdk.policies: Request method: 'GET'
2025-05-06T11:01:50.7883957Z DEBUG: cli.azure.cli.core.sdk.policies: Request headers:
2025-05-06T11:01:50.7884412Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '823586b6-2a69-11f0-9e92-002248a61875'
2025-05-06T11:01:50.7884849Z DEBUG: cli.azure.cli.core.sdk.policies: 'CommandName': 'acr import'
2025-05-06T11:01:50.7885320Z DEBUG: cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --source --image --password --force --debug'
2025-05-06T11:01:50.7885921Z DEBUG: cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-2022Server-10.0.20348-SP0) VSTS_2e9898bd-0f04-47ec-9eb2-039304dae064_build_97_0'
2025-05-06T11:01:50.7886442Z DEBUG: cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
2025-05-06T11:01:50.7886828Z DEBUG: cli.azure.cli.core.sdk.policies: Request body:
2025-05-06T11:01:50.7887234Z DEBUG: cli.azure.cli.core.sdk.policies: This request has no body
2025-05-06T11:01:51.0762591Z DEBUG: urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/providers/Microsoft.ContainerRegistry/locations/EASTUS/operationResults/registries-823586b6-2a69-11f0-9e92-002248a61875?api-version=2023-11-01-preview&t=638821261107444829&c=MIIHpTCCBo2gAwIBAgITOgWeMn5lGzFWFOIH_QAEBZ4yfjANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSU5GUkEgQ0EgMDEwHhcNMjUwNDIxMTgxODEzWhcNMjUxMDE4MTgxODEzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK3M5cqUFrE-N9ofWv1xYoBwuQmgRY1thdb7P4Ll_QOuQYidglbVh9gucJ1H1Nc1ak7tmTqgMwmM6BPiYj_77yZ2nt3lvFToqmsFom6Xo1gON3S_AYry8sNFvW0-hbW9AQU2BmRv31BctxeciFyuF1B5mO1dLxppVl3KgX-DoImrH4Y7tfffsIFp-iHx5muEJwOoIvTw9AaEcNBiQIeYeDfdwHG8H9sJNsCsrcJACmswu6on_y56MNqcZmMCioP0PReJULZLQjtp_iGxRpiPPXqAfQxgjXuz4xAIlKyjQ1PS59F4uh9baenp4C-w1CEntBeqmtNM5XZ6zdX0Wv6YRckCAwEAAaOCBJIwggSOMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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_PjsurvwwKidileIud8-YzAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBALtICJMFo2ghB0pAmgFiQTDnAlivqv97DzZp_k6NDAzoQTnGA5AS700Ssg0uFJOyBwsyLMBNlWAf1rMVMDp6mt1k2NvZLnOPYIfLD0Y673-C0Eg5GLYF-wZ_9lPJgiiP4MsjxTl43wFFoR21F3alM86o79663Y2Ar8XN-Ja8yTFiheTfKk3Pnax9v1uEe34n9fzK6Z2VIJlRo1TJQVESgKWainiCq59-dY92H-UAoraL_pCZa8XsLFtkwymvb7VgRoXQISuBllRZBdBGP6iW3VbmlvL0U7CPk8t3OZQZwNMELDDbsBU0zDc6JCfcyJiBTMBXxeqv67ievhrVlCogL6s&s=UR2rsRniftL1Fg6oxqctTxjIn9M-NcsMptBFhK11_LdV5L-J2d9GVSRfj5j2bQCR9aPa0dHVu0PV2FUQOKFOmzcwpsw1NixvZ-eQ3z5_DWcpc7N0B5iXT7_0rHNO9ggceMDxApxA1vaA1DmApBxwvWtQlCD4TnSNqnJ1l5J-yRHwhjTCnNo6aYS7Ja04-Baq-_roFnC7tXTWSewYCSJ9UiH9zAvnvsQnq7qAU0c2Cr9eLEqw8SW9epSpVdgJKuX18XZjnGGl9eB7cLxIbl_KyYvkVvJit7TNVmphOnBZc_Xzuj8AoYA-lC2AtLibWmX7VlfrzhhtPPWHdecD17NFng&h=8L0NXamVmidTLUAsrbKAPf4b-RZJRnkY9NXQ1A9N4EQ HTTP/1.1" 400 546
2025-05-06T11:01:51.0767001Z DEBUG: cli.azure.cli.core.sdk.policies: Response status: 400
2025-05-06T11:01:51.0767653Z DEBUG: cli.azure.cli.core.sdk.policies: Response headers:
2025-05-06T11:01:51.0771166Z DEBUG: cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
2025-05-06T11:01:51.0771493Z DEBUG: cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
2025-05-06T11:01:51.0771745Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Length': '546'
2025-05-06T11:01:51.0772043Z DEBUG: cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
2025-05-06T11:01:51.0772337Z DEBUG: cli.azure.cli.core.sdk.policies: 'Expires': '-1'
2025-05-06T11:01:51.0772630Z DEBUG: cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
2025-05-06T11:01:51.0773307Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': 'appId=***,tenantId=AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY,objectId=b9011c20-f674-40b6-a1be-f4869ea0095f/southcentralus/ebb22dd1-9c3b-4185-b370-85b9a2d9d292'
2025-05-06T11:01:51.0773756Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
2025-05-06T11:01:51.0774147Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
2025-05-06T11:01:51.0774472Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '42e6d3af-c772-4121-847f-79362f50b56c'
2025-05-06T11:01:51.0774800Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '42e6d3af-c772-4121-847f-79362f50b56c'
2025-05-06T11:01:51.0775194Z DEBUG: cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'SOUTHCENTRALUS:20250506T110151Z:42e6d3af-c772-4121-847f-79362f50b56c'
2025-05-06T11:01:51.0775528Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
2025-05-06T11:01:51.0775796Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
2025-05-06T11:01:51.0776150Z DEBUG: cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: F554A48BDAD041DAB7A03A5ABF5CE4D5 Ref B: SN4AA2022303045 Ref C: 2025-05-06T11:01:50Z'
2025-05-06T11:01:51.0776493Z DEBUG: cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 06 May 2025 11:01:50 GMT'
2025-05-06T11:01:51.0776788Z DEBUG: cli.azure.cli.core.sdk.policies: Response content:
2025-05-06T11:01:51.0777395Z DEBUG: cli.azure.cli.core.sdk.policies: {"error":{"code":"InvalidParameters","message":"Operation registries-823586b6-2a69-11f0-9e92-002248a61875 failed. Resource /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {\"errors\":[{\"code\":\"DENIED\",\"message\":\"client with IP '20.62.128.3' is not allowed access, refer https://aka.ms/acr/firewall to grant access\"}]}\n"},"status":"Failed"}
2025-05-06T11:01:51.3077687Z DEBUG: cli.azure.cli.core.azclierror: Traceback (most recent call last):
2025-05-06T11:01:51.3078624Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/polling/base_polling.py", line 757, in run
2025-05-06T11:01:51.3079628Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/polling/base_polling.py", line 783, in _poll
2025-05-06T11:01:51.3080041Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/polling/base_polling.py", line 809, in update_status
2025-05-06T11:01:51.3080899Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/polling/base_polling.py", line 156, in _raise_if_bad_http_status_and_method
2025-05-06T11:01:51.3081670Z azure.core.polling.base_polling.BadStatus: Invalid return status 400 for 'GET' operation
2025-05-06T11:01:51.3081823Z
2025-05-06T11:01:51.3082034Z The above exception was the direct cause of the following exception:
2025-05-06T11:01:51.3082164Z
2025-05-06T11:01:51.3082353Z Traceback (most recent call last):
2025-05-06T11:01:51.3082621Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
2025-05-06T11:01:51.3082981Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 666, in execute
2025-05-06T11:01:51.3083335Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially
2025-05-06T11:01:51.3083709Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 703, in _run_job
2025-05-06T11:01:51.3084056Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 336, in __call__
2025-05-06T11:01:51.3084432Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
2025-05-06T11:01:51.3084797Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/acr/import.py", line 114, in acr_import
2025-05-06T11:01:51.3085165Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 1076, in __call__
2025-05-06T11:01:51.3085514Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 1063, in __call__
2025-05-06T11:01:51.3085867Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/polling/_poller.py", line 251, in result
2025-05-06T11:01:51.3086201Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/tracing/decorator.py", line 94, in wrapper_use_tracer
2025-05-06T11:01:51.3086561Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/polling/_poller.py", line 270, in wait
2025-05-06T11:01:51.3086892Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/polling/_poller.py", line 185, in _start
2025-05-06T11:01:51.3087227Z File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/core/polling/base_polling.py", line 761, in run
2025-05-06T11:01:51.3087849Z azure.core.exceptions.HttpResponseError: (InvalidParameters) Operation registries-823586b6-2a69-11f0-9e92-002248a61875 failed. Resource /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {"errors":[{"code":"DENIED","message":"client with IP '20.62.128.3' is not allowed access, refer https://aka.ms/acr/firewall to grant access"}]}
2025-05-06T11:01:51.3088579Z
2025-05-06T11:01:51.3088770Z Code: InvalidParameters
2025-05-06T11:01:51.3089299Z Message: Operation registries-823586b6-2a69-11f0-9e92-002248a61875 failed. Resource /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {"errors":[{"code":"DENIED","message":"client with IP '20.62.128.3' is not allowed access, refer https://aka.ms/acr/firewall to grant access"}]}
2025-05-06T11:01:51.3089802Z
2025-05-06T11:01:51.3089857Z
2025-05-06T11:01:51.3552903Z ERROR: cli.azure.cli.core.azclierror: (InvalidParameters) Operation registries-823586b6-2a69-11f0-9e92-002248a61875 failed. Resource /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {"errors":[{"code":"DENIED","message":"client with IP '20.62.128.3' is not allowed access, refer https://aka.ms/acr/firewall to grant access"}]}
2025-05-06T11:01:51.3555453Z
2025-05-06T11:01:51.3556757Z Code: InvalidParameters
2025-05-06T11:01:51.3557644Z Message: Operation registries-823586b6-2a69-11f0-9e92-002248a61875 failed. Resource /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {"errors":[{"code":"DENIED","message":"client with IP '20.62.128.3' is not allowed access, refer https://aka.ms/acr/firewall to grant access"}]}
2025-05-06T11:01:51.3558295Z
2025-05-06T11:01:51.3559128Z ERROR: az_command_data_logger: (InvalidParameters) Operation registries-823586b6-2a69-11f0-9e92-002248a61875 failed. Resource /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {"errors":[{"code":"DENIED","message":"client with IP '20.62.128.3' is not allowed access, refer https://aka.ms/acr/firewall to grant access"}]}
2025-05-06T11:01:51.3559714Z
2025-05-06T11:01:51.3560063Z Code: InvalidParameters
2025-05-06T11:01:51.3560781Z Message: Operation registries-823586b6-2a69-11f0-9e92-002248a61875 failed. Resource /subscriptions/AAAAAAAA-BBBB-CCCC-DDDD-74badYYYYY/resourceGroups/dev/providers/Microsoft.ContainerRegistry/registries/destinationacr An error occurred when getting manifest. StatusCode: 403, Reason: Forbidden, Details: {"errors":[{"code":"DENIED","message":"client with IP '20.62.128.3' is not allowed access, refer https://aka.ms/acr/firewall to grant access"}]}
2025-05-06T11:01:51.3561341Z
2025-05-06T11:01:51.3561759Z DEBUG: cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x0000020592D47560>]
2025-05-06T11:01:51.3562179Z INFO: az_command_data_logger: exit code: 1
2025-05-06T11:01:51.3562583Z INFO: cli.__main__: Command ran in 2.365 seconds (init: 0.319, invoke: 2.046)
2025-05-06T11:01:51.4002031Z INFO: telemetry.main: Begin splitting cli events and extra events, total events: 1
2025-05-06T11:01:51.4003693Z INFO: telemetry.client: Accumulated 0 events. Flush the clients.
2025-05-06T11:01:51.4010879Z INFO: telemetry.main: Finish splitting cli events and extra events, cli events: 1
2025-05-06T11:01:51.4011460Z INFO: telemetry.save: Save telemetry record of length 4970 in cache file under D:\a\_temp\.azclitask\telemetry\20250506110151397
2025-05-06T11:01:51.4011904Z INFO: telemetry.main: Begin creating telemetry upload process.
2025-05-06T11:01:51.4013525Z INFO: telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry\__init__.pyc D:\a\_temp\.azclitask D:\a\_temp\.azclitask\telemetry\20250506110151397"
2025-05-06T11:01:51.4058604Z INFO: telemetry.process: Return from creating process 2352
2025-05-06T11:01:51.4116763Z INFO: telemetry.main: Finish creating telemetry upload process.
Expected behavior
As you can see from the error log, it says failed to get manifest from the Destination ACR but this is not true. It fails to get the manifest from the Source ACR.
If you remove the network limitations on the SOURCE ACR while the network restrictions are in place for DESTINATION ACR, the command works without any issues and the import is successful.
There are 2 issues here -
- First, the log should say that it was not able to connect to the SOURCE ACR instead of DESTINATION ACR.
- If it is able to push to the DESTINATION ACR which is having firewall restrictions, then same method should be allowed to be used to pull the image from SOURCE ACR as well. Not sure if the issue is with Destination Firewall rules not being respected or Source firewall restriction for this command needs to be removed.
Environment Summary
Azure Devops Hosted Agent windows-latest
Additional context
No response