fix: Added Role assignment for managed identity to pull the image from Container

Author: Prajwal-Microsoft

infra/main.bicep

@@ -467,6 +467,13 @@ module avmContainerRegistry 'modules/container-registry.bicep' = {
     acrSku: 'Standard'
     publicNetworkAccess: 'Enabled'
     zoneRedundancy: 'Disabled'
+    roleAssignments: [
+      {
+        principalId: avmContainerRegistryReader.outputs.principalId
+        roleDefinitionIdOrName: 'AcrPull'
+        principalType: 'ServicePrincipal'
+      }
+    ]
     tags: tags
   }
 }

infra/modules/container-registry.bicep

@@ -16,6 +16,10 @@ param publicNetworkAccess string = 'Enabled'
 @description('Zone redundancy setting for the Azure Container Registry')
 param zoneRedundancy string = 'Disabled'
 
+import { roleAssignmentType } from 'br/public:avm/utl/types/avm-common-types:0.5.1'
+@description('Optional. Array of role assignments to create.')
+param roleAssignments roleAssignmentType[]?
+
 @description('Tags to be applied to the Container Registry')
 param tags object = {}
 
@@ -27,6 +31,7 @@ module avmContainerRegistry 'br/public:avm/res/container-registry/registry:0.9.1
     acrSku: acrSku
     publicNetworkAccess: publicNetworkAccess
     zoneRedundancy: zoneRedundancy
+    roleAssignments: roleAssignments
     tags: tags
   }
 }