It is not possible to set `Identitites` `Subnet IDs` or `DNS

Question

It is not possible to set `Identitites` `Subnet IDs` or `DNS Servers` for an Azure Container Instance work pool via the we portal This appears to block use of images in the Azure Container Registry because we need to include the ACRManagedIdentity `identity` in the `identites` list otherwise the identity is not attached to the container group and pulling from an azure container registry fails with ```Exception Details InvalidImageRegistryIdentity The identity in the imageRegistryCredentials of container group get repo info 58bac517 8e50 4466 b939 f88722d7c09a not found in container group identity list Code InvalidImageRegistryIdentity Message The identity in the imageRegistryCredentials of container group get repo info 58bac517 8e50 4466 b939 f88722d7c09a not found in container group identity list 03 18 37 PM prefect flow runs worker```

Jeremy Hetzel · Answer

Update I was able to add an identity to a worker pool `identities` in the web interface clicking Advanced and manually adding a default for the `identities` object ``` identities type array items type string title Identities default subscriptions fee8989c 9995 4501 ba37 0167452a65c7 resourcegroups west europe providers Microsoft ManagedIdentity userAssignedIdentities prefect acr description A list of user assigned identities to associate with the container group The identities should be an ARM resource IDs in the form subscriptions subscriptionId resourceGroups resourceGroupName providers Microsoft ManagedIdentity userAssignedIdentities identityName ``` It still shows an empty identities in the non advanced view

Jeremy Hetzel · Answer

However the identity is present in the configuration object ```prefect worker start n my aci worker p azure2 13 46 53 Discovered worker type azure container instance for work pool azure2 Worker my aci worker started 13 47 08 807 | INFO | prefect flow runs worker Worker my aci worker submitting flow run b1cd5cbc fffc 4d87 b5df c64c998146ba 13 47 09 734 | INFO | prefect worker azure container instance my aci worker AzureContainerInstanceJob my aci worker Preparing to run command python m prefect engine in container prefecthq prefect 2 11 5 python3 10 13 47 09 735 | INFO | prefect worker azure container instance my aci worker AzureContainerInstanceJob my aci worker Creating container group gt home jhetzel src c core labs holmes venv lib python3 10 site packages prefect azure workers container instance py 749 provision container group gt created container group = await run sync in worker thread Pdb list 744 resource group name=configuration resource group name 745 deployment name=f prefect container group name 746 parameters=deployment 747 748 breakpoint 749 gt created container group = await run sync in worker thread 750 self wait for task container start 751 aci client 752 configuration 753 container group name 754 creation status poller Pdb configuration identities subscriptions fee8989c 9995 4501 ba37 0167452a65c7 resourcegroups west europe providers Microsoft ManagedIdentity userAssignedIdentities prefect acr Pdb continue 13 48 50 949 | INFO | prefect worker azure container instance my aci worker AzureContainerInstanceJob my aci worker Running command 13 48 50 954 | INFO | prefect worker azure container instance my aci worker AzureContainerInstanceJob my aci worker Completed command run 13 48 50 954 | INFO | prefect worker azure container instance my aci worker AzureContainerInstanceJob my aci worker Deleting container 13 48 51 097 | INFO | prefect flow runs worker Completed submission of flow run b1cd5cbc fffc 4d87 b5df c64c998146ba 13 48 54 507 | INFO | prefect worker azure container instance my aci worker AzureContainerInstanceJob my aci worker Container deleted ```

David Yang · Answer

I added identities and subnet configuration in deployment yaml file That works I used the ACI push type work pool The nice thing about that is we don t need to run worker But it seems that prefect doesn t delete the ACI group after the flow completed successfully I hope prefect can fix that ASAP