App Service Linux Containers VNET Integration cannot connect to ACR with Private Endpoint

[aldrichang]

Hi,

Is it possible to pull images from Azure Container registry that has private endpoint enabled and public network access disabled?
This is coming from an App Service Linux container with VNET Integration enabled.

I can resolve the private endpoint IP of the container registry from Kudu.
I'm currently getting the following error when disabling public network access from ACR
ERROR - DockerApiException: Docker API responded with status code=InternalServerError, response={"message":"denied"}
It works if I enable public network access.

Thanks!