<p>I'm using AKS with ACR and it works fine when I specify an image (update the Deployment .yaml file manually to update the image version name).</p>
<p>But when I try to do this automatically using image tag filtering:
<a href="https://docs.fluxcd.io/en/latest/references/fluxctl/" rel="nofollow noreferrer">https://docs.fluxcd.io/en/latest/references/fluxctl/</a></p>
<p>Using:</p>
<pre><code>fluxctl policy `
    --k8s-fwd-ns=&quot;flux&quot; `
    --workload=default:deployment/myclient `
    --tag-all=&quot;mybranch_*&quot;
</code></pre>
<p>which adds:</p>
<pre><code>fluxcd.io/tag.myclient: glob:mybranch_*
</code></pre>
<p>When I do:</p>
<pre><code>kubectl -n flux logs &lt;podId&gt;
</code></pre>
<p>I get this error:</p>
<pre><code> err=&quot;requesting tags: Get \&quot;https://my_azure_acr/v2/clients/myclient/tags/list\&quot;: unauthorized: authentication required, visit https://aka.ms/acr/authorization for more information.&quot;
</code></pre>
<p>Any idea why?</p>

user3401331
<p>It seems you don't have permission to control the ACR. And as it shows <a href="https://fluxcd.io/docs/guides/image-update/#azure-container-registry" rel="nofollow noreferrer">here</a>, you need to add a secret to authenticate to the ACR for Flux.</p>
