{"id":"b498e752-ee1a-4311-a680-2defc0bbb99e","shortId":"Bddfvw","kind":"skill","title":"azure-container-registry","tagline":"Expert knowledge for Azure Container Registry development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using ACR Tasks, geo-replicatio","description":"# Azure Container Registry Skill\n\nThis skill provides expert guidance for Azure Container Registry. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L37-L52 | Diagnosing and fixing ACR issues: health checks, error codes, login/auth, network and performance problems, transfer/streaming/cache failures, logs, Arc/connected registry, and CMK encryption. |\n| Best Practices | L53-L60 | Best practices for ACR operations: managing public image dependencies, safe image deletion and storage cleanup, and robust image tagging/versioning strategies. |\n| Decision Making | L61-L67 | Guidance on choosing ACR auth for Kubernetes, planning geo-replication, and migrating image signing from Docker Content Trust to Notary Project. |\n| Architecture & Design Patterns | L68-L73 | Patterns for ACR performance and governance: caching image pulls, geo-replication strategies, connected registries for edge/offline, and gated import workflows for public images. |\n| Limits & Quotas | L74-L79 | Details on ACR SKUs (Basic/Standard/Premium) including throughput and feature limits, and how image storage capacity, layers, and repositories are calculated and constrained. |\n| Security | L80-L119 | Securing Azure Container Registry: auth methods, RBAC/ABAC and tokens, network isolation (firewall, Private Link, IP/service tags), data exfiltration controls, image signing/verification, and policy/compliance. |\n| Configuration | L120-L137 | Configuring ACR behavior: caching, purge/retention/soft delete, delete locks, tasks (YAML, timers, multi-step, patching, agent pools), webhooks, wildcard cache rules, and monitoring. |\n| Integrations & Coding Patterns | L138-L153 | How to integrate ACR with ACI, AKS, Helm, ORAS, Buildpacks, ACR Transfer, GitHub Actions, Notation, Key Vault, and webhooks for image access, builds, signing, and automation |\n| Deployment | L154-L159 | Using ARM templates to automate ACR quick tasks and data transfer, and deploying/managing ACR connected registries via Azure Arc extension |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Run az acr check-health for quick ACR diagnostics | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-check-health |\n| Azure Container Registry FAQ and known issues | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-faq |\n| Interpret az acr check-health error codes and fixes | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-health-error-reference |\n| View and manage Azure Container Registry task run logs | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-logs |\n| Troubleshoot Azure Container Registry Transfer failures | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-troubleshooting |\n| Troubleshoot Azure Container Registry network connectivity | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-access |\n| Troubleshoot ACR login, authentication, and authorization issues | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-login-authn-authz |\n| Troubleshoot Azure Container Registry performance problems | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-performance |\n| Troubleshoot Azure Container Registry artifact cache issues | https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-cache |\n| Diagnose and fix Azure Container Registry artifact streaming issues | https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-streaming |\n| Troubleshoot connected registry Arc extension issues | https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-connected-registry-arc |\n| Troubleshoot customer-managed key issues in ACR | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-troubleshoot-customer-managed-keys |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Manage public image dependencies using ACR | https://learn.microsoft.com/en-us/azure/container-registry/buffer-gate-public-content |\n| Follow operational best practices for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-best-practices |\n| Delete ACR images safely to manage registry storage | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-delete |\n| Apply image tagging and versioning best practices in ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-image-tag-version |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Select Kubernetes authentication options for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/authenticate-kubernetes-options |\n| Migrate ACR signing from DCT to Notary Project | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust-deprecation |\n| Plan and configure geo-replication for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-geo-replication |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Design and use connected registries with ACR | https://learn.microsoft.com/en-us/azure/container-registry/intro-connected-registry |\n| Implement gated import workflow for public images in ACR | https://learn.microsoft.com/en-us/azure/container-registry/tasks-consume-public-content |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Understand Azure Container Registry SKU limits and features | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-skus |\n| Review Azure Container Registry image storage limits | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-storage |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Allow trusted Azure services to access network-restricted ACR | https://learn.microsoft.com/en-us/azure/container-registry/allow-access-trusted-services |\n| Enable anonymous pull access for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/anonymous-pull-access |\n| Configure cross-tenant AKS authentication to Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/authenticate-aks-cross-tenant |\n| Restrict Azure Container Registry public access by IP rules | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-access-selected-networks |\n| Use Microsoft Entra service principals to access ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-service-principal |\n| Choose and configure authentication methods for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication |\n| Configure managed identity authentication to Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication-managed-identity |\n| Use Azure Policy to audit ACR compliance | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-azure-policy |\n| Configure Microsoft Entra Conditional Access policies for ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-configure-conditional-access |\n| Enable Docker Content Trust for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust |\n| Use dedicated data endpoints to mitigate ACR data exfiltration | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-dedicated-data-endpoints |\n| Control accepted Microsoft Entra auth scopes for ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-disable-authentication-as-arm |\n| Configure firewall rules to allow access to Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-firewall-access-rules |\n| Configure Private Link private endpoints for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-private-link |\n| Configure Azure ABAC repository permissions in ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-abac-repository-permissions |\n| Reference for Azure Container Registry built-in RBAC roles | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-directory-reference |\n| Assign Azure RBAC roles for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-overview |\n| Create and assign custom RBAC roles for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-custom-roles |\n| Use Azure Container Registry service tags for network rules | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-service-tag |\n| Access Key Vault secrets from ACR Tasks via managed identity | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-key-vault |\n| Configure managed identity for ACR Tasks | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-managed-identity |\n| Use managed identity for cross-registry auth in ACR Tasks | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-cross-registry-authentication |\n| Configure token-based repository permissions in Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-token-based-repository-permissions |\n| Sign ACR images with CA certs via Key Vault | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-trusted-ca |\n| Enforce AKS image signature verification with Ratify | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-verify-with-ratify-aks |\n| Restrict ACR access with virtual network service endpoints | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-vnet |\n| Disable artifact export to prevent ACR data exfiltration | https://learn.microsoft.com/en-us/azure/container-registry/data-loss-prevention |\n| Manage ACR Tasks network bypass policy with trusted services | https://learn.microsoft.com/en-us/azure/container-registry/manage-network-bypass-policy-for-tasks |\n| Reference of built-in Azure Policy definitions for ACR | https://learn.microsoft.com/en-us/azure/container-registry/policy-reference |\n| Configure client tokens to pull from connected registries | https://learn.microsoft.com/en-us/azure/container-registry/pull-images-from-connected-registry |\n| Scan ACR images with Microsoft Defender for Cloud | https://learn.microsoft.com/en-us/azure/container-registry/scan-images-defender |\n| Apply Azure Policy compliance controls to ACR | https://learn.microsoft.com/en-us/azure/container-registry/security-controls-policy |\n| Secure connected registry Arc extension deployments | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-connected-registry-arc |\n| Configure customer-managed encryption keys for ACR | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-customer-managed-keys |\n| Enable customer-managed keys on Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-enable-customer-managed-keys |\n| Rotate and revoke customer-managed keys for ACR | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-rotate-revoke-customer-managed-keys |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Configure artifact cache in ACR using Azure CLI | https://learn.microsoft.com/en-us/azure/container-registry/artifact-cache-cli |\n| Configure and schedule ACR purge for tags and manifests | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auto-purge |\n| Configure delete locks on ACR images and repositories | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-image-lock |\n| Configure retention policy for untagged ACR manifests | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-retention-policy |\n| Configure and use ACR soft delete retention policy | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-soft-delete-policy |\n| Use multi-step ACR Tasks to build, test, and patch images | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-multi-step |\n| YAML schema reference for Azure Container Registry Tasks | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-reference-yaml |\n| Schedule Azure Container Registry Tasks with timers | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-scheduled |\n| Configure multi-step ACR Tasks for build workflows | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-multistep-task |\n| Webhook payload schema for Azure Container Registry events | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook-reference |\n| Configure continuous patching for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/how-to-continuous-patching |\n| Monitoring metrics and logs reference for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/monitor-container-registry-reference |\n| Configure dedicated agent pools for ACR Tasks | https://learn.microsoft.com/en-us/azure/container-registry/tasks-agent-pools |\n| Configure wildcard cache rules for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/wildcards-artifact-cache |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Grant Azure Container Instances access to ACR with service principals | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-aci |\n| Create Kubernetes pull secrets for Azure Container Registry access | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-kubernetes |\n| Host and manage Helm chart repositories in ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-helm-repos |\n| Import container images into ACR using Azure APIs | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-import-images |\n| Manage OCI and supply chain artifacts in ACR with ORAS | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-manage-artifact |\n| Build images with Buildpacks using az acr pack build | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-pack-build |\n| Use ACR Transfer with Azure CLI extension | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-cli |\n| Build, push, and sign ACR images in GitHub Actions with Notation | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-sign-notation-artifact-signing |\n| Verify signed ACR images in GitHub Actions workflows | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-verify-notation-artifact-signing |\n| Sign ACR images with Notation using Azure Key Vault certificates | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-build-push |\n| Sign and verify ACR images using Notation and Artifact Signing | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-verify-notation-artifact-signing |\n| Configure ACR webhooks for registry event notifications | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook |\n\n### Deployment\n| Topic | URL |\n|-------|-----|\n| Queue ACR quick task runs with ARM templates | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-task-run-template |\n| Automate ACR Transfer using ARM templates | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-arm-template |\n| Deploy the ACR connected registry Arc extension | https://learn.microsoft.com/en-us/azure/container-registry/quickstart-connected-registry-arc-cli |","tags":["azure","container","registry","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions"],"capabilities":["skill","source-microsoftdocs","skill-azure-container-registry","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-container-registry","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.698","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 497 github stars · SKILL.md body (17,678 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T06:53:29.965Z","embedding":null,"createdAt":"2026-04-18T21:58:34.627Z","updatedAt":"2026-04-22T06:53:29.965Z","lastSeenAt":"2026-04-22T06:53:29.965Z","tsv":"'/en-us/azure/container-registry/allow-access-trusted-services':744 '/en-us/azure/container-registry/anonymous-pull-access':755 '/en-us/azure/container-registry/artifact-cache-cli':1161 '/en-us/azure/container-registry/authenticate-aks-cross-tenant':768 '/en-us/azure/container-registry/authenticate-kubernetes-options':652 '/en-us/azure/container-registry/buffer-gate-public-content':603 '/en-us/azure/container-registry/container-registry-access-selected-networks':780 '/en-us/azure/container-registry/container-registry-auth-aci':1325 '/en-us/azure/container-registry/container-registry-auth-kubernetes':1337 '/en-us/azure/container-registry/container-registry-auth-service-principal':791 '/en-us/azure/container-registry/container-registry-authentication':803 '/en-us/azure/container-registry/container-registry-authentication-managed-identity':814 '/en-us/azure/container-registry/container-registry-auto-purge':1173 '/en-us/azure/container-registry/container-registry-azure-policy':824 '/en-us/azure/container-registry/container-registry-best-practices':614 '/en-us/azure/container-registry/container-registry-check-health':476 '/en-us/azure/container-registry/container-registry-configure-conditional-access':835 '/en-us/azure/container-registry/container-registry-content-trust':846 '/en-us/azure/container-registry/container-registry-content-trust-deprecation':663 '/en-us/azure/container-registry/container-registry-dedicated-data-endpoints':858 '/en-us/azure/container-registry/container-registry-delete':625 '/en-us/azure/container-registry/container-registry-disable-authentication-as-arm':869 '/en-us/azure/container-registry/container-registry-faq':486 '/en-us/azure/container-registry/container-registry-firewall-access-rules':882 '/en-us/azure/container-registry/container-registry-geo-replication':676 '/en-us/azure/container-registry/container-registry-health-error-reference':499 '/en-us/azure/container-registry/container-registry-helm-repos':1348 '/en-us/azure/container-registry/container-registry-image-lock':1184 '/en-us/azure/container-registry/container-registry-image-tag-version':637 '/en-us/azure/container-registry/container-registry-import-images':1359 '/en-us/azure/container-registry/container-registry-manage-artifact':1372 '/en-us/azure/container-registry/container-registry-private-link':894 '/en-us/azure/container-registry/container-registry-rbac-abac-repository-permissions':904 '/en-us/azure/container-registry/container-registry-rbac-built-in-roles-directory-reference':917 '/en-us/azure/container-registry/container-registry-rbac-built-in-roles-overview':928 '/en-us/azure/container-registry/container-registry-rbac-custom-roles':941 '/en-us/azure/container-registry/container-registry-retention-policy':1194 '/en-us/azure/container-registry/container-registry-service-tag':953 '/en-us/azure/container-registry/container-registry-skus':718 '/en-us/azure/container-registry/container-registry-soft-delete-policy':1205 '/en-us/azure/container-registry/container-registry-storage':728 '/en-us/azure/container-registry/container-registry-task-run-template':1469 '/en-us/azure/container-registry/container-registry-tasks-authentication-key-vault':966 '/en-us/azure/container-registry/container-registry-tasks-authentication-managed-identity':975 '/en-us/azure/container-registry/container-registry-tasks-cross-registry-authentication':989 '/en-us/azure/container-registry/container-registry-tasks-logs':511 '/en-us/azure/container-registry/container-registry-tasks-multi-step':1220 '/en-us/azure/container-registry/container-registry-tasks-pack-build':1384 '/en-us/azure/container-registry/container-registry-tasks-reference-yaml':1231 '/en-us/azure/container-registry/container-registry-tasks-scheduled':1241 '/en-us/azure/container-registry/container-registry-token-based-repository-permissions':1002 '/en-us/azure/container-registry/container-registry-transfer-arm-template':1478 '/en-us/azure/container-registry/container-registry-transfer-cli':1394 '/en-us/azure/container-registry/container-registry-transfer-troubleshooting':520 '/en-us/azure/container-registry/container-registry-troubleshoot-access':529 '/en-us/azure/container-registry/container-registry-troubleshoot-login-authn-authz':539 '/en-us/azure/container-registry/container-registry-troubleshoot-performance':548 '/en-us/azure/container-registry/container-registry-tutorial-github-sign-notation-artifact-signing':1408 '/en-us/azure/container-registry/container-registry-tutorial-github-verify-notation-artifact-signing':1419 '/en-us/azure/container-registry/container-registry-tutorial-multistep-task':1253 '/en-us/azure/container-registry/container-registry-tutorial-sign-build-push':1432 '/en-us/azure/container-registry/container-registry-tutorial-sign-trusted-ca':1014 '/en-us/azure/container-registry/container-registry-tutorial-sign-verify-notation-artifact-signing':1445 '/en-us/azure/container-registry/container-registry-tutorial-verify-with-ratify-aks':1024 '/en-us/azure/container-registry/container-registry-vnet':1035 '/en-us/azure/container-registry/container-registry-webhook':1455 '/en-us/azure/container-registry/container-registry-webhook-reference':1264 '/en-us/azure/container-registry/data-loss-prevention':1046 '/en-us/azure/container-registry/how-to-continuous-patching':1274 '/en-us/azure/container-registry/intro-connected-registry':691 '/en-us/azure/container-registry/manage-network-bypass-policy-for-tasks':1058 '/en-us/azure/container-registry/monitor-container-registry-reference':1286 '/en-us/azure/container-registry/policy-reference':1071 '/en-us/azure/container-registry/pull-images-from-connected-registry':1082 '/en-us/azure/container-registry/quickstart-connected-registry-arc-cli':1488 '/en-us/azure/container-registry/scan-images-defender':1093 '/en-us/azure/container-registry/security-controls-policy':1103 '/en-us/azure/container-registry/tasks-agent-pools':1296 '/en-us/azure/container-registry/tasks-consume-public-content':703 '/en-us/azure/container-registry/troubleshoot-artifact-cache':558 '/en-us/azure/container-registry/troubleshoot-artifact-streaming':570 '/en-us/azure/container-registry/troubleshoot-connected-registry-arc':579 '/en-us/azure/container-registry/tutorial-connected-registry-arc':1112 '/en-us/azure/container-registry/tutorial-customer-managed-keys':1123 '/en-us/azure/container-registry/tutorial-enable-customer-managed-keys':1135 '/en-us/azure/container-registry/tutorial-rotate-revoke-customer-managed-keys':1147 '/en-us/azure/container-registry/tutorial-troubleshoot-customer-managed-keys':590 '/en-us/azure/container-registry/wildcards-artifact-cache':1307 '/microsoftdocs/mcp/blob/main/readme.md)':168 '3':139 'abac':897 'accept':207,860 'access':173,432,737,748,774,787,829,875,954,1027,1317,1334 'aci':416 'acr':33,223,250,275,302,331,383,414,421,446,454,466,472,489,531,587,600,616,634,654,688,700,741,788,820,832,853,866,901,959,971,985,1004,1026,1041,1048,1068,1084,1100,1120,1144,1155,1165,1178,1190,1198,1210,1246,1292,1319,1345,1353,1367,1379,1386,1399,1411,1421,1436,1447,1460,1471,1481 'action':424,1403,1415 'agent':88,132,191,205,397,1289 'ak':417,760,1016 'allow':732,874 'anonym':746 'api':1356 'appli':626,1094 'arc':459,574,1107,1484 'arc/connected':237 'architectur':18,57,294,677 'arm':442,1465,1474 'artifact':553,565,1037,1152,1365,1441 'assign':918,931 'audit':819 'auth':276,359,863,983 'authent':533,644,761,795,807 'author':535 'autom':436,445,1470 'avail':158 'az':465,488,1378 'azur':2,8,38,48,356,458,477,503,513,522,541,550,562,609,647,671,709,720,734,750,763,770,798,809,816,841,877,889,896,907,919,923,936,943,997,1064,1095,1130,1157,1225,1233,1258,1269,1281,1302,1314,1331,1355,1389,1426 'azure-container-registri':1 'base':993 'basic/standard/premium':333 'behavior':384 'best':14,53,242,247,591,606,631 'build':433,1213,1249,1373,1381,1395 'buildpack':420,1376 'built':911,1062 'built-in':910,1061 'bypass':1051 'ca':1007 'cach':306,385,401,554,1153,1299 'calcul':348 'capabl':80 'capac':343 'categori':91,99,115,211,213 'cert':1008 'certif':1429 'chain':1364 'chart':1342 'check':226,468,491 'check-health':467,490 'choos':274,792 'cleanup':261 'cli':1158,1390 'client':1073 'cloud':1090 'cmk':240 'code':26,65,228,406,494,1309 'combin':70 'complianc':821,1097 'condit':828 'configur':24,63,378,382,666,756,794,804,825,870,883,895,967,990,1072,1113,1148,1151,1162,1174,1185,1195,1242,1265,1287,1297,1446 'connect':313,455,526,572,685,1078,1105,1482 'constrain':350 'contain':3,9,39,49,357,478,504,514,523,542,551,563,610,648,672,710,721,751,764,771,799,810,842,878,890,908,924,937,944,998,1131,1226,1234,1259,1270,1282,1303,1315,1332,1350 'content':75,177,289,838 'continu':1266 'control':373,859,1098 'cover':51 'creat':929,1326 'cross':758,981 'cross-registri':980 'cross-ten':757 'custom':582,932,1115,1126,1140 'customer-manag':581,1114,1125,1139 'data':371,450,849,854,1042 'dct':657 'decis':16,55,267,638 'dedic':848,1288 'defend':1088 'definit':1066 'delet':258,387,388,615,1175,1200 'depend':255,598 'deploy':29,68,437,1109,1456,1479 'deploying/managing':453 'descript':215 'design':19,58,295,678,682 'detail':329 'develop':11 'diagnos':220,559 'diagnost':473 'disabl':1036 'doc':183 'docker':288,837 'document':78,176 'e.g':103,119 'edge/offline':316 'enabl':745,836,1124 'encrypt':241,1117 'endpoint':850,887,1032 'enforc':1015 'entra':783,827,862 'error':227,493 'event':1261,1451 'exfiltr':372,855,1043 'expert':5,45 'export':1038 'extens':460,575,1108,1391,1485 'failur':235,517 'fallback':195 'faq':480 'featur':337,715 'fetch':79,175,184,197 'file':109,117,124,129 'firewal':366,871 'fix':222,496,561 'follow':604 'gate':318,693 'geo':36,281,310,668 'geo-repl':280,309,667 'geo-replicatio':35 'github':423,1402,1414 'github.com':167 'github.com/microsoftdocs/mcp/blob/main/readme.md)':166 'govern':305 'grant':1313 'guid':165 'guidanc':46,272 'health':225,469,492 'helm':418,1341 'host':1338 'ident':806,963,969,978 'imag':254,257,264,285,307,323,341,374,431,597,617,627,698,723,1005,1017,1085,1179,1217,1351,1374,1400,1412,1422,1437 'implement':692 'import':86,130,319,694,1349 'includ':12,334 'index':92,212 'instal':162,164 'instanc':1316 'integr':25,64,405,413,1308 'interpret':487 'ip':776 'ip/service':369 'isol':365 'issu':224,483,536,555,567,576,585 'key':426,584,955,1010,1118,1128,1142,1427 'knowledg':6 'known':482 'kubernet':278,643,1327 'l119':354 'l120':106,380 'l120-l137':379 'l137':381 'l138':409 'l138-l153':408 'l153':410 'l154':439 'l154-l159':438 'l159':440 'l35':105 'l35-l120':104 'l37':218 'l37-l52':217 'l52':219 'l53':245 'l53-l60':244 'l60':246 'l61':270 'l61-l67':269 'l67':271 'l68':298 'l68-l73':297 'l73':299 'l74':327 'l74-l79':326 'l79':328 'l80':353 'l80-l119':352 'latest':147 'layer':344 'learn':190,204 'learn-agent-skil':189,203 'learn.microsoft.com':475,485,498,510,519,528,538,547,557,569,578,589,602,613,624,636,651,662,675,690,702,717,727,743,754,767,779,790,802,813,823,834,845,857,868,881,893,903,916,927,940,952,965,974,988,1001,1013,1023,1034,1045,1057,1070,1081,1092,1102,1111,1122,1134,1146,1160,1172,1183,1193,1204,1219,1230,1240,1252,1263,1273,1285,1295,1306,1324,1336,1347,1358,1371,1383,1393,1407,1418,1431,1444,1454,1468,1477,1487 'learn.microsoft.com/en-us/azure/container-registry/allow-access-trusted-services':742 'learn.microsoft.com/en-us/azure/container-registry/anonymous-pull-access':753 'learn.microsoft.com/en-us/azure/container-registry/artifact-cache-cli':1159 'learn.microsoft.com/en-us/azure/container-registry/authenticate-aks-cross-tenant':766 'learn.microsoft.com/en-us/azure/container-registry/authenticate-kubernetes-options':650 'learn.microsoft.com/en-us/azure/container-registry/buffer-gate-public-content':601 'learn.microsoft.com/en-us/azure/container-registry/container-registry-access-selected-networks':778 'learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-aci':1323 'learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-kubernetes':1335 'learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-service-principal':789 'learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication':801 'learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication-managed-identity':812 'learn.microsoft.com/en-us/azure/container-registry/container-registry-auto-purge':1171 'learn.microsoft.com/en-us/azure/container-registry/container-registry-azure-policy':822 'learn.microsoft.com/en-us/azure/container-registry/container-registry-best-practices':612 'learn.microsoft.com/en-us/azure/container-registry/container-registry-check-health':474 'learn.microsoft.com/en-us/azure/container-registry/container-registry-configure-conditional-access':833 'learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust':844 'learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust-deprecation':661 'learn.microsoft.com/en-us/azure/container-registry/container-registry-dedicated-data-endpoints':856 'learn.microsoft.com/en-us/azure/container-registry/container-registry-delete':623 'learn.microsoft.com/en-us/azure/container-registry/container-registry-disable-authentication-as-arm':867 'learn.microsoft.com/en-us/azure/container-registry/container-registry-faq':484 'learn.microsoft.com/en-us/azure/container-registry/container-registry-firewall-access-rules':880 'learn.microsoft.com/en-us/azure/container-registry/container-registry-geo-replication':674 'learn.microsoft.com/en-us/azure/container-registry/container-registry-health-error-reference':497 'learn.microsoft.com/en-us/azure/container-registry/container-registry-helm-repos':1346 'learn.microsoft.com/en-us/azure/container-registry/container-registry-image-lock':1182 'learn.microsoft.com/en-us/azure/container-registry/container-registry-image-tag-version':635 'learn.microsoft.com/en-us/azure/container-registry/container-registry-import-images':1357 'learn.microsoft.com/en-us/azure/container-registry/container-registry-manage-artifact':1370 'learn.microsoft.com/en-us/azure/container-registry/container-registry-private-link':892 'learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-abac-repository-permissions':902 'learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-directory-reference':915 'learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-overview':926 'learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-custom-roles':939 'learn.microsoft.com/en-us/azure/container-registry/container-registry-retention-policy':1192 'learn.microsoft.com/en-us/azure/container-registry/container-registry-service-tag':951 'learn.microsoft.com/en-us/azure/container-registry/container-registry-skus':716 'learn.microsoft.com/en-us/azure/container-registry/container-registry-soft-delete-policy':1203 'learn.microsoft.com/en-us/azure/container-registry/container-registry-storage':726 'learn.microsoft.com/en-us/azure/container-registry/container-registry-task-run-template':1467 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-key-vault':964 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-managed-identity':973 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-cross-registry-authentication':987 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-logs':509 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-multi-step':1218 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-pack-build':1382 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-reference-yaml':1229 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-scheduled':1239 'learn.microsoft.com/en-us/azure/container-registry/container-registry-token-based-repository-permissions':1000 'learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-arm-template':1476 'learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-cli':1392 'learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-troubleshooting':518 'learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-access':527 'learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-login-authn-authz':537 'learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-performance':546 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-sign-notation-artifact-signing':1406 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-verify-notation-artifact-signing':1417 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-multistep-task':1251 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-build-push':1430 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-trusted-ca':1012 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-verify-notation-artifact-signing':1443 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-verify-with-ratify-aks':1022 'learn.microsoft.com/en-us/azure/container-registry/container-registry-vnet':1033 'learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook':1453 'learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook-reference':1262 'learn.microsoft.com/en-us/azure/container-registry/data-loss-prevention':1044 'learn.microsoft.com/en-us/azure/container-registry/how-to-continuous-patching':1272 'learn.microsoft.com/en-us/azure/container-registry/intro-connected-registry':689 'learn.microsoft.com/en-us/azure/container-registry/manage-network-bypass-policy-for-tasks':1056 'learn.microsoft.com/en-us/azure/container-registry/monitor-container-registry-reference':1284 'learn.microsoft.com/en-us/azure/container-registry/policy-reference':1069 'learn.microsoft.com/en-us/azure/container-registry/pull-images-from-connected-registry':1080 'learn.microsoft.com/en-us/azure/container-registry/quickstart-connected-registry-arc-cli':1486 'learn.microsoft.com/en-us/azure/container-registry/scan-images-defender':1091 'learn.microsoft.com/en-us/azure/container-registry/security-controls-policy':1101 'learn.microsoft.com/en-us/azure/container-registry/tasks-agent-pools':1294 'learn.microsoft.com/en-us/azure/container-registry/tasks-consume-public-content':701 'learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-cache':556 'learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-streaming':568 'learn.microsoft.com/en-us/azure/container-registry/troubleshoot-connected-registry-arc':577 'learn.microsoft.com/en-us/azure/container-registry/tutorial-connected-registry-arc':1110 'learn.microsoft.com/en-us/azure/container-registry/tutorial-customer-managed-keys':1121 'learn.microsoft.com/en-us/azure/container-registry/tutorial-enable-customer-managed-keys':1133 'learn.microsoft.com/en-us/azure/container-registry/tutorial-rotate-revoke-customer-managed-keys':1145 'learn.microsoft.com/en-us/azure/container-registry/tutorial-troubleshoot-customer-managed-keys':588 'learn.microsoft.com/en-us/azure/container-registry/wildcards-artifact-cache':1305 'limit':21,60,324,338,704,713,725 'line':101,113,214 'link':118,127,368,885 'local':71 'locat':95 'lock':389,1176 'log':236,508,1278 'login':532 'login/auth':229 'make':17,56,268,639 'manag':252,502,583,595,620,805,962,968,977,1047,1116,1127,1141,1340,1360 'manifest':1170,1191 'markdown':194,210 'mcp':153,180 'metadata.generated':134 'method':360,796 'metric':1276 'microsoft':182,782,826,861,1087 'microsoftdoc':154,181 'migrat':284,653 'mitig':852 'monitor':404,1275 'month':140 'multi':394,1208,1244 'multi-step':393,1207,1243 'network':172,230,364,525,739,949,1030,1050 'network-restrict':738 'notari':292,659 'notat':425,1405,1424,1439 'notif':1452 'oci':1361 'old':141 'oper':251,605 'option':645 'ora':419,1369 'pack':1380 'patch':396,1216,1267 'pattern':20,27,59,66,296,300,407,679,1310 'payload':1255 'perform':232,303,544 'permiss':899,995 'plan':279,664 'polici':817,830,1052,1065,1096,1187,1202 'policy/compliance':377 'pool':398,1290 'practic':15,54,243,248,592,607,632 'prefer':178 'prevent':1040 'princip':785,1322 'privat':367,884,886 'problem':233,545 'project':293,660 'provid':44 'public':253,322,596,697,773 'pull':145,308,747,1076,1328 'purg':1166 'purge/retention/soft':386 'push':1396 'queri':186,200 'queue':1459 'quick':73,447,471,1461 'quick-refer':72 'quota':22,61,325,705 'rang':102 'ratifi':1021 'rbac':913,920,933 'rbac/abac':361 'read':108,123 'refer':74,128,905,1059,1223,1279 'registri':4,10,40,50,238,314,358,456,479,505,515,524,543,552,564,573,611,621,649,673,686,711,722,752,765,772,800,811,843,879,891,909,925,938,945,982,999,1079,1106,1132,1227,1235,1260,1271,1283,1304,1333,1450,1483 'relev':96 'remot':77 'replic':282,311,669 'replicatio':37 'repositori':151,346,898,994,1181,1343 'requir':171 'restrict':740,769,1025 'retent':1186,1201 'return':193,209 'review':719 'revok':1138 'robust':263 'role':914,921,934 'rotat':1136 'rule':402,777,872,950,1300 'run':464,507,1463 'safe':256,618 'scan':1083 'schedul':1164,1232 'schema':1222,1256 'scope':864 'secret':957,1329 'section':97 'secur':23,62,351,355,729,1104 'security.md':120,121 'select':642 'servic':735,784,946,1031,1055,1321 'sign':286,434,655,1003,1398,1410,1420,1433,1442 'signatur':1018 'signing/verification':375 'skill':41,43,85,170,192,206 'skill-azure-container-registry' 'sku':712 'skus':332 'soft':1199 'source-microsoftdocs' 'specifi':112 'step':395,1209,1245 'storag':260,342,622,724 'strategi':266,312 'stream':566 'string':187,201 'suggest':142,159 'suppli':1363 'tag':370,628,947,1168 'tagging/versioning':265 'task':34,390,448,506,960,972,986,1049,1211,1228,1236,1247,1293,1462 'templat':443,1466,1475 'tenant':759 'test':1214 'text/markdown':208 'throughput':335 'timer':392,1238 'token':363,992,1074 'token-bas':991 'tool':155 'topic':462,593,640,680,706,730,1149,1311,1457 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'transfer':422,451,516,1387,1472 'transfer/streaming/cache':234 'troubleshoot':13,52,216,461,512,521,530,540,549,571,580 'trust':290,733,839,1054 'understand':708 'untag':1189 'url':463,594,641,681,707,731,1150,1312,1458 'use':30,32,83,89,107,122,179,196,441,599,684,781,815,847,942,976,1156,1197,1206,1354,1377,1385,1425,1438,1473 'user':144,161 'vault':427,956,1011,1428 'verif':1019 'verifi':1409,1435 'version':148,630 'via':457,961,1009 'view':500 'virtual':1029 'webhook':399,429,1254,1448 'webpag':198 'wildcard':400,1298 'workflow':320,695,1250,1416 'yaml':391,1221","prices":[{"id":"c5ba0cd4-b486-47e1-b8cd-2e6f44b8f95e","listingId":"b498e752-ee1a-4311-a680-2defc0bbb99e","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T21:58:34.627Z"}],"sources":[{"listingId":"b498e752-ee1a-4311-a680-2defc0bbb99e","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-container-registry","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-container-registry","isPrimary":false,"firstSeenAt":"2026-04-18T21:58:34.627Z","lastSeenAt":"2026-04-22T06:53:29.965Z"}],"details":{"listingId":"b498e752-ee1a-4311-a680-2defc0bbb99e","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-container-registry","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":497,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-04-22T01:37:27Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"da825e101570dc5f29c0628d1cf8b45df32adb69","skill_md_path":"skills/azure-container-registry/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-container-registry"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-container-registry","description":"Expert knowledge for Azure Container Registry development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using ACR Tasks, geo-replication, Private Link, connected registries, or image signing with Notation, and other Azure Container Registry related development tasks. Not for Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Red Hat OpenShift (use azure-redhat-openshift).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-container-registry"},"updatedAt":"2026-04-22T06:53:29.965Z"}}