There's a single command to link the AKS cluster with the ACR instance.
That linking process is all about setting permissions - and you might find when you run the pipeline that your service connection doesn't have permissions to set permissions for other resources.
If you try running the same command locally then it should work.
Need more? Here's the solution.