Agentpool Creation with 1ES is failing

Question

Agentpool Creation with 1ES is failing

Ojas Chopade (LTIMINDTREE LIMITED) 0 Microsoft External Staff

While trying to create an agentpool in south india region through azure portal 1ES option, the deployment is failing with error "Image Backup-1ES-AgentImage-Windows was not found in region southindia. Image is available in. Please replicate the shared gallery image to the target region. (Code: SharedGalleryImageNotInRegion)".
However, we have created that image in the south india region, and it is present,

Himanshu Shekhar 4,025 Reputation points Microsoft External Staff Moderator

2026-03-10T13:03:40.6366667+00:00
Ojas Chopade (LTIMINDTREE LIMITED)

Although the Azure Compute Gallery image and image definition are created in the South India region, Managed DevOps Pools (1ES) validates availability based on the image version replication.

The error SharedGalleryImageNotInRegion occurs when the image version is not explicitly replicated to South India, even if the gallery itself resides there.

Please ensure the required image version includes South India as a target replication region and that the DevOpsInfrastructure service principal has Reader access to the gallery or image.

This behavior is by design and documented in Microsoft documentation :

Azure Compute Gallery replication requirement - https://learn.microsoft.com/en-us/azure/virtual-machines/troubleshooting-shared-images

Troubleshoot Shared Image Gallery issues - https://learn.microsoft.com/en-us/azure/virtual-machines/troubleshooting-shared-images

Configure Managed DevOps Pools images - https://learn.microsoft.com/en-us/azure/devops/managed-devops-pools/configure-images?view=azure-devops&tabs=azure-portal

If you have any further queries, let me know.
Pravallika KV 11,030 Reputation points Microsoft External Staff Moderator

2026-03-12T20:55:15.6633333+00:00
Hi @Ojas Chopade (LTIMINDTREE LIMITED) ,

The error means the image version is not replicated to South India, even if the image definition exists there in Microsoft Azure.

If not, add South India to the replication regions or create a new version replicated to South India.

Verify and update your image version’s replication

In the Azure portal, go to your Shared Image Gallery =>Images =>select your image definition =>Versions =>pick the version you want =>Replication regions

Make sure South India is listed as a target region and the replication status = Succeeded. If it isn’t, add it and save.

Or via CLI:

az sig image-version update \ --resource-group MyRG \ --gallery-name MyGallery \ --gallery-image-definition Backup-1ES-AgentImage-Windows \ --gallery-image-version 1.0.0 \ --target-regions southindia=1

Grant Reader access to the DevOps service principal

The Managed DevOps Pools service principal usually named DevOpsInfrastructure needs at least Reader on the gallery or specific image version.

In the portal, navigate to your gallery/resource group =>Access control (IAM) =>Add role assignment =>select Reader =>assign to the DevOpsInfrastructure principal.

Wait for replication to finish: Replication can take a few minutes. Once it’s complete, retry your 1ES agent pool deployment.

1 answer

Your answer

Himanshu Shekhar 4,025 Reputation points Microsoft External Staff Moderator

2026-03-10T13:03:40.6366667+00:00

Ojas Chopade (LTIMINDTREE LIMITED)

Although the Azure Compute Gallery image and image definition are created in the South India region, Managed DevOps Pools (1ES) validates availability based on the image version replication.

The error SharedGalleryImageNotInRegion occurs when the image version is not explicitly replicated to South India, even if the gallery itself resides there.

Please ensure the required image version includes South India as a target replication region and that the DevOpsInfrastructure service principal has Reader access to the gallery or image.

This behavior is by design and documented in Microsoft documentation :

Azure Compute Gallery replication requirement - https://learn.microsoft.com/en-us/azure/virtual-machines/troubleshooting-shared-images

Troubleshoot Shared Image Gallery issues - https://learn.microsoft.com/en-us/azure/virtual-machines/troubleshooting-shared-images

Configure Managed DevOps Pools images - https://learn.microsoft.com/en-us/azure/devops/managed-devops-pools/configure-images?view=azure-devops&tabs=azure-portal

If you have any further queries, let me know.
Pravallika KV 11,030 Reputation points Microsoft External Staff Moderator

2026-03-12T20:55:15.6633333+00:00

Hi @Ojas Chopade (LTIMINDTREE LIMITED) ,

The error means the image version is not replicated to South India, even if the image definition exists there in Microsoft Azure.

If not, add South India to the replication regions or create a new version replicated to South India.

Verify and update your image version’s replication

In the Azure portal, go to your Shared Image Gallery =>Images =>select your image definition =>Versions =>pick the version you want =>Replication regions

Make sure South India is listed as a target region and the replication status = Succeeded. If it isn’t, add it and save.

Or via CLI:

az sig image-version update \ --resource-group MyRG \ --gallery-name MyGallery \ --gallery-image-definition Backup-1ES-AgentImage-Windows \ --gallery-image-version 1.0.0 \ --target-regions southindia=1

Grant Reader access to the DevOps service principal

The Managed DevOps Pools service principal usually named DevOpsInfrastructure needs at least Reader on the gallery or specific image version.

In the portal, navigate to your gallery/resource group =>Access control (IAM) =>Add role assignment =>select Reader =>assign to the DevOpsInfrastructure principal.

Wait for replication to finish: Replication can take a few minutes. Once it’s complete, retry your 1ES agent pool deployment.

Answer 1

The error SharedGalleryImageNotInRegion indicates that, from the perspective of the Azure Compute Gallery, the image version being referenced by the 1ES agent pool deployment does not have a replica in the target region, even if the image resource itself is located there.

For Azure Compute Gallery images, the region where the gallery/image definition/image version resources are created and the list of publishing regions (replicas) must explicitly include the target region:

If the image version’s publishing profile does not contain the target region, deployments in that region fail with an error that the image is not available in the region.
The publishing regions list must also contain the source region of the image version.

To unblock the deployment:

Open the Azure Compute Gallery image version that backs Backup-1ES-AgentImage-Windows.
In the image version’s publishing profile, verify that:
- South India is present in the list of target/publishing regions.
- The source region of the image version is also included in the publishing regions list.
If South India is missing, update the image version to add South India as a publishing region (or create a new image version with South India in the publishing regions).
Wait for replication to complete in South India, then retry creating the 1ES agent pool.

If the image version already lists South India but deployment still fails, validate that there is at least one image version in South India that is not excluded from latest, and that the region name is not duplicated or misconfigured in the publishing profile.

References:

Share via

Agentpool Creation with 1ES is failing

1 answer

Your answer