{"id":"b498e752-ee1a-4311-a680-2defc0bbb99e","shortId":"Bddfvw","kind":"skill","title":"azure-container-registry","tagline":"Expert knowledge for Azure Container Registry development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using private endpoints/RBAC, g","description":"# Azure Container Registry Skill\n\nThis skill provides expert guidance for Azure Container Registry. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L37-L52 | Diagnosing and fixing ACR issues: health checks, error codes, login/auth, network and performance problems, transfer/streaming/cache failures, logs, Arc/connected registry, and CMK encryption. |\n| Best Practices | L53-L60 | Best practices for ACR operations: managing public image dependencies, safe image deletion and storage cleanup, and robust image tagging/versioning strategies. |\n| Decision Making | L61-L67 | Guidance on choosing ACR auth for Kubernetes, planning geo-replication, and migrating image signing from Docker Content Trust to Notary Project. |\n| Architecture & Design Patterns | L68-L73 | Patterns for ACR performance and governance: caching image pulls, geo-replication strategies, connected registries for edge/offline, and gated import workflows for public images. |\n| Limits & Quotas | L74-L79 | Details on ACR SKUs (Basic/Standard/Premium) feature differences, performance and throughput limits, and how image storage capacity and quotas are calculated and enforced. |\n| Security | L80-L119 | Securing ACR with auth, RBAC, network controls, encryption, image signing/verification, policies, and managed identities to prevent unauthorized access and data exfiltration. |\n| Configuration | L120-L137 | Configuring ACR behavior: caching, purge/retention/soft delete, delete locks, tasks (YAML, timers, multi-step, patching, agent pools), webhooks, wildcard cache rules, and monitoring. |\n| Integrations & Coding Patterns | L138-L154 | Integrating ACR with Kubernetes, ACI, GitHub Actions, ORAS, and ACR Transfer; configuring auth, pull secrets, webhooks, caching, Helm, buildpacks, and image signing/verification. |\n| Deployment | L155-L160 | Using ARM templates to automate ACR quick tasks and data transfer, and deploying/managing ACR connected registries via Azure Arc extension |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Run az acr check-health for quick ACR diagnostics | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-check-health |\n| Azure Container Registry FAQ and known issues | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-faq |\n| Interpret az acr check-health error codes and fixes | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-health-error-reference |\n| View and manage Azure Container Registry task run logs | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-logs |\n| Troubleshoot Azure Container Registry Transfer failures | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-troubleshooting |\n| Troubleshoot Azure Container Registry network connectivity | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-access |\n| Troubleshoot ACR login, authentication, and authorization issues | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-login-authn-authz |\n| Troubleshoot Azure Container Registry performance problems | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-performance |\n| Troubleshoot Azure Container Registry artifact cache issues | https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-cache |\n| Diagnose and fix Azure Container Registry artifact streaming issues | https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-streaming |\n| Troubleshoot connected registry Arc extension issues | https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-connected-registry-arc |\n| Troubleshoot customer-managed key issues in ACR | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-troubleshoot-customer-managed-keys |\n\n### Best Practices\n| Topic | URL |\n|-------|-----|\n| Manage public image dependencies using ACR | https://learn.microsoft.com/en-us/azure/container-registry/buffer-gate-public-content |\n| Follow operational best practices for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-best-practices |\n| Delete ACR images safely to manage registry storage | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-delete |\n| Apply image tagging and versioning best practices in ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-image-tag-version |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Select Kubernetes authentication options for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/authenticate-kubernetes-options |\n| Migrate ACR signing from DCT to Notary Project | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust-deprecation |\n| Plan and configure geo-replication for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-geo-replication |\n\n### Architecture & Design Patterns\n| Topic | URL |\n|-------|-----|\n| Design and use connected registries with ACR | https://learn.microsoft.com/en-us/azure/container-registry/intro-connected-registry |\n| Implement gated import workflow for public images in ACR | https://learn.microsoft.com/en-us/azure/container-registry/tasks-consume-public-content |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Compare Azure Container Registry SKU features and limits | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-skus |\n| Review Azure Container Registry image storage limits | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-storage |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Allow trusted Azure services to access network-restricted ACR | https://learn.microsoft.com/en-us/azure/container-registry/allow-access-trusted-services |\n| Enable anonymous pull access for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/anonymous-pull-access |\n| Configure cross-tenant AKS authentication to Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/authenticate-aks-cross-tenant |\n| Restrict Azure Container Registry public access by IP rules | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-access-selected-networks |\n| Use Microsoft Entra service principals to access ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-service-principal |\n| Choose and configure authentication methods for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication |\n| Configure managed identity authentication to Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication-managed-identity |\n| Use Azure Policy to audit ACR compliance | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-azure-policy |\n| Configure Microsoft Entra Conditional Access policies for ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-configure-conditional-access |\n| Enable Docker Content Trust for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust |\n| Use dedicated data endpoints to mitigate ACR data exfiltration | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-dedicated-data-endpoints |\n| Control accepted Microsoft Entra auth scopes for ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-disable-authentication-as-arm |\n| Configure firewall rules to allow access to Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-firewall-access-rules |\n| Secure Azure Container Registry with Private Link endpoints | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-private-link |\n| Configure Azure ABAC repository permissions in ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-abac-repository-permissions |\n| Reference for Azure Container Registry built-in RBAC roles | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-directory-reference |\n| Assign Azure RBAC roles for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-overview |\n| Create and assign custom RBAC roles for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-custom-roles |\n| Use Azure Container Registry service tags for network rules | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-service-tag |\n| Access Key Vault secrets from ACR Tasks via managed identity | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-key-vault |\n| Configure managed identity for ACR Tasks | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-managed-identity |\n| Use managed identity for cross-registry auth in ACR Tasks | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-cross-registry-authentication |\n| Configure token-based repository permissions in Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-token-based-repository-permissions |\n| Sign ACR images with CA certs via Key Vault | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-trusted-ca |\n| Enforce AKS image signature verification with Ratify | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-verify-with-ratify-aks |\n| Restrict ACR access with virtual network service endpoints | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-vnet |\n| Disable artifact export to prevent ACR data exfiltration | https://learn.microsoft.com/en-us/azure/container-registry/data-loss-prevention |\n| Manage ACR Tasks network bypass policy with trusted services | https://learn.microsoft.com/en-us/azure/container-registry/manage-network-bypass-policy-for-tasks |\n| Reference of built-in Azure Policy definitions for ACR | https://learn.microsoft.com/en-us/azure/container-registry/policy-reference |\n| Configure client tokens to pull from connected registries | https://learn.microsoft.com/en-us/azure/container-registry/pull-images-from-connected-registry |\n| Scan ACR images with Microsoft Defender for Cloud | https://learn.microsoft.com/en-us/azure/container-registry/scan-images-defender |\n| Apply Azure Policy compliance controls to ACR | https://learn.microsoft.com/en-us/azure/container-registry/security-controls-policy |\n| Secure connected registry Arc extension deployments | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-connected-registry-arc |\n| Configure customer-managed encryption keys for ACR | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-customer-managed-keys |\n| Enable customer-managed keys on Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-enable-customer-managed-keys |\n| Rotate and revoke customer-managed keys for ACR | https://learn.microsoft.com/en-us/azure/container-registry/tutorial-rotate-revoke-customer-managed-keys |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Configure artifact cache in ACR using Azure CLI | https://learn.microsoft.com/en-us/azure/container-registry/artifact-cache-cli |\n| Configure and schedule ACR purge for tags and manifests | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auto-purge |\n| Configure delete locks on ACR images and repositories | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-image-lock |\n| Configure retention policy for untagged ACR manifests | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-retention-policy |\n| Configure and use ACR soft delete retention policy | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-soft-delete-policy |\n| Use multi-step ACR Tasks to build, test, and patch images | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-multi-step |\n| YAML schema reference for Azure Container Registry Tasks | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-reference-yaml |\n| Schedule Azure Container Registry Tasks with timers | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-scheduled |\n| Configure multi-step ACR Tasks for build workflows | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-multistep-task |\n| Webhook payload schema for Azure Container Registry events | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook-reference |\n| Configure continuous patching for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/how-to-continuous-patching |\n| Monitoring metrics and logs reference for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/monitor-container-registry-reference |\n| Configure dedicated agent pools for ACR Tasks | https://learn.microsoft.com/en-us/azure/container-registry/tasks-agent-pools |\n| Configure wildcard cache rules for Azure Container Registry | https://learn.microsoft.com/en-us/azure/container-registry/wildcards-artifact-cache |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Configure ACR-to-ACR artifact caching with managed identity | https://learn.microsoft.com/en-us/azure/container-registry/artifact-cache-acr-to-acr-cli |\n| Grant Azure Container Instances access to ACR with service principals | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-aci |\n| Create Kubernetes pull secrets for Azure Container Registry access | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-kubernetes |\n| Host and manage Helm chart repositories in ACR | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-helm-repos |\n| Import container images into ACR using Azure APIs | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-import-images |\n| Manage OCI and supply chain artifacts in ACR with ORAS | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-manage-artifact |\n| Build images with Buildpacks using az acr pack build | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-pack-build |\n| Use ACR Transfer with Azure CLI extension | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-cli |\n| Build, push, and sign ACR images in GitHub Actions with Notation | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-sign-notation-artifact-signing |\n| Verify signed ACR images in GitHub Actions workflows | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-verify-notation-artifact-signing |\n| Sign ACR images with Notation using Azure Key Vault certificates | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-build-push |\n| Sign and verify ACR images using Notation and Artifact Signing | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-verify-notation-artifact-signing |\n| Configure ACR webhooks for registry event notifications | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook |\n\n### Deployment\n| Topic | URL |\n|-------|-----|\n| Queue ACR quick task runs with ARM templates | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-task-run-template |\n| Automate ACR Transfer using ARM templates | https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-arm-template |\n| Deploy the ACR connected registry Arc extension | https://learn.microsoft.com/en-us/azure/container-registry/quickstart-connected-registry-arc-cli |","tags":["azure","container","registry","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions"],"capabilities":["skill","source-microsoftdocs","skill-azure-container-registry","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-container-registry","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.700","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 549 github stars · SKILL.md body (17,786 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T18:53:50.715Z","embedding":null,"createdAt":"2026-04-18T21:58:34.627Z","updatedAt":"2026-05-18T18:53:50.715Z","lastSeenAt":"2026-05-18T18:53:50.715Z","tsv":"'/en-us/azure/container-registry/allow-access-trusted-services':736 '/en-us/azure/container-registry/anonymous-pull-access':747 '/en-us/azure/container-registry/artifact-cache-acr-to-acr-cli':1316 '/en-us/azure/container-registry/artifact-cache-cli':1152 '/en-us/azure/container-registry/authenticate-aks-cross-tenant':760 '/en-us/azure/container-registry/authenticate-kubernetes-options':644 '/en-us/azure/container-registry/buffer-gate-public-content':595 '/en-us/azure/container-registry/container-registry-access-selected-networks':772 '/en-us/azure/container-registry/container-registry-auth-aci':1329 '/en-us/azure/container-registry/container-registry-auth-kubernetes':1341 '/en-us/azure/container-registry/container-registry-auth-service-principal':783 '/en-us/azure/container-registry/container-registry-authentication':795 '/en-us/azure/container-registry/container-registry-authentication-managed-identity':806 '/en-us/azure/container-registry/container-registry-auto-purge':1164 '/en-us/azure/container-registry/container-registry-azure-policy':816 '/en-us/azure/container-registry/container-registry-best-practices':606 '/en-us/azure/container-registry/container-registry-check-health':468 '/en-us/azure/container-registry/container-registry-configure-conditional-access':827 '/en-us/azure/container-registry/container-registry-content-trust':838 '/en-us/azure/container-registry/container-registry-content-trust-deprecation':655 '/en-us/azure/container-registry/container-registry-dedicated-data-endpoints':850 '/en-us/azure/container-registry/container-registry-delete':617 '/en-us/azure/container-registry/container-registry-disable-authentication-as-arm':861 '/en-us/azure/container-registry/container-registry-faq':478 '/en-us/azure/container-registry/container-registry-firewall-access-rules':874 '/en-us/azure/container-registry/container-registry-geo-replication':668 '/en-us/azure/container-registry/container-registry-health-error-reference':491 '/en-us/azure/container-registry/container-registry-helm-repos':1352 '/en-us/azure/container-registry/container-registry-image-lock':1175 '/en-us/azure/container-registry/container-registry-image-tag-version':629 '/en-us/azure/container-registry/container-registry-import-images':1363 '/en-us/azure/container-registry/container-registry-manage-artifact':1376 '/en-us/azure/container-registry/container-registry-private-link':885 '/en-us/azure/container-registry/container-registry-rbac-abac-repository-permissions':895 '/en-us/azure/container-registry/container-registry-rbac-built-in-roles-directory-reference':908 '/en-us/azure/container-registry/container-registry-rbac-built-in-roles-overview':919 '/en-us/azure/container-registry/container-registry-rbac-custom-roles':932 '/en-us/azure/container-registry/container-registry-retention-policy':1185 '/en-us/azure/container-registry/container-registry-service-tag':944 '/en-us/azure/container-registry/container-registry-skus':710 '/en-us/azure/container-registry/container-registry-soft-delete-policy':1196 '/en-us/azure/container-registry/container-registry-storage':720 '/en-us/azure/container-registry/container-registry-task-run-template':1473 '/en-us/azure/container-registry/container-registry-tasks-authentication-key-vault':957 '/en-us/azure/container-registry/container-registry-tasks-authentication-managed-identity':966 '/en-us/azure/container-registry/container-registry-tasks-cross-registry-authentication':980 '/en-us/azure/container-registry/container-registry-tasks-logs':503 '/en-us/azure/container-registry/container-registry-tasks-multi-step':1211 '/en-us/azure/container-registry/container-registry-tasks-pack-build':1388 '/en-us/azure/container-registry/container-registry-tasks-reference-yaml':1222 '/en-us/azure/container-registry/container-registry-tasks-scheduled':1232 '/en-us/azure/container-registry/container-registry-token-based-repository-permissions':993 '/en-us/azure/container-registry/container-registry-transfer-arm-template':1482 '/en-us/azure/container-registry/container-registry-transfer-cli':1398 '/en-us/azure/container-registry/container-registry-transfer-troubleshooting':512 '/en-us/azure/container-registry/container-registry-troubleshoot-access':521 '/en-us/azure/container-registry/container-registry-troubleshoot-login-authn-authz':531 '/en-us/azure/container-registry/container-registry-troubleshoot-performance':540 '/en-us/azure/container-registry/container-registry-tutorial-github-sign-notation-artifact-signing':1412 '/en-us/azure/container-registry/container-registry-tutorial-github-verify-notation-artifact-signing':1423 '/en-us/azure/container-registry/container-registry-tutorial-multistep-task':1244 '/en-us/azure/container-registry/container-registry-tutorial-sign-build-push':1436 '/en-us/azure/container-registry/container-registry-tutorial-sign-trusted-ca':1005 '/en-us/azure/container-registry/container-registry-tutorial-sign-verify-notation-artifact-signing':1449 '/en-us/azure/container-registry/container-registry-tutorial-verify-with-ratify-aks':1015 '/en-us/azure/container-registry/container-registry-vnet':1026 '/en-us/azure/container-registry/container-registry-webhook':1459 '/en-us/azure/container-registry/container-registry-webhook-reference':1255 '/en-us/azure/container-registry/data-loss-prevention':1037 '/en-us/azure/container-registry/how-to-continuous-patching':1265 '/en-us/azure/container-registry/intro-connected-registry':683 '/en-us/azure/container-registry/manage-network-bypass-policy-for-tasks':1049 '/en-us/azure/container-registry/monitor-container-registry-reference':1277 '/en-us/azure/container-registry/policy-reference':1062 '/en-us/azure/container-registry/pull-images-from-connected-registry':1073 '/en-us/azure/container-registry/quickstart-connected-registry-arc-cli':1492 '/en-us/azure/container-registry/scan-images-defender':1084 '/en-us/azure/container-registry/security-controls-policy':1094 '/en-us/azure/container-registry/tasks-agent-pools':1287 '/en-us/azure/container-registry/tasks-consume-public-content':695 '/en-us/azure/container-registry/troubleshoot-artifact-cache':550 '/en-us/azure/container-registry/troubleshoot-artifact-streaming':562 '/en-us/azure/container-registry/troubleshoot-connected-registry-arc':571 '/en-us/azure/container-registry/tutorial-connected-registry-arc':1103 '/en-us/azure/container-registry/tutorial-customer-managed-keys':1114 '/en-us/azure/container-registry/tutorial-enable-customer-managed-keys':1126 '/en-us/azure/container-registry/tutorial-rotate-revoke-customer-managed-keys':1138 '/en-us/azure/container-registry/tutorial-troubleshoot-customer-managed-keys':582 '/en-us/azure/container-registry/wildcards-artifact-cache':1298 '/microsoftdocs/mcp/blob/main/readme.md)':166 '3':137 'abac':888 'accept':205,852 'access':171,370,729,740,766,779,821,867,945,1018,1321,1338 'aci':411 'acr':221,248,273,300,329,354,379,408,416,438,446,458,464,481,523,579,592,608,626,646,680,692,733,780,812,824,845,858,892,950,962,976,995,1017,1032,1039,1059,1075,1091,1111,1135,1146,1156,1169,1181,1189,1201,1237,1283,1306,1308,1323,1349,1357,1371,1383,1390,1403,1415,1425,1440,1451,1464,1475,1485 'acr-to-acr':1305 'action':413,1407,1419 'agent':86,130,189,203,393,1280 'ak':752,1007 'allow':724,866 'anonym':738 'api':1360 'appli':618,1085 'arc':451,566,1098,1488 'arc/connected':235 'architectur':18,55,292,669 'arm':434,1469,1478 'artifact':545,557,1028,1143,1309,1369,1445 'assign':909,922 'audit':811 'auth':274,356,419,855,974 'authent':525,636,753,787,799 'author':527 'autom':437,1474 'avail':156 'az':457,480,1382 'azur':2,8,36,46,450,469,495,505,514,533,542,554,601,639,663,701,712,726,742,755,762,790,801,808,833,869,876,887,898,910,914,927,934,988,1055,1086,1121,1148,1216,1224,1249,1260,1272,1293,1318,1335,1359,1393,1430 'azure-container-registri':1 'base':984 'basic/standard/premium':331 'behavior':380 'best':14,51,240,245,583,598,623 'build':1204,1240,1377,1385,1399 'buildpack':425,1380 'built':902,1053 'built-in':901,1052 'bypass':1042 'ca':998 'cach':304,381,397,423,546,1144,1290,1310 'calcul':346 'capabl':78 'capac':342 'categori':89,97,113,209,211 'cert':999 'certif':1433 'chain':1368 'chart':1346 'check':224,460,483 'check-health':459,482 'choos':272,784 'cleanup':259 'cli':1149,1394 'client':1064 'cloud':1081 'cmk':238 'code':26,63,226,402,486,1300 'combin':68 'compar':700 'complianc':813,1088 'condit':820 'configur':24,61,374,378,418,658,748,786,796,817,862,886,958,981,1063,1104,1139,1142,1153,1165,1176,1186,1233,1256,1278,1288,1304,1450 'connect':311,447,518,564,677,1069,1096,1486 'contain':3,9,37,47,470,496,506,515,534,543,555,602,640,664,702,713,743,756,763,791,802,834,870,877,899,915,928,935,989,1122,1217,1225,1250,1261,1273,1294,1319,1336,1354 'content':73,175,287,830 'continu':1257 'control':359,851,1089 'cover':49 'creat':920,1330 'cross':750,972 'cross-registri':971 'cross-ten':749 'custom':574,923,1106,1117,1131 'customer-manag':573,1105,1116,1130 'data':372,442,841,846,1033 'dct':649 'decis':16,53,265,630 'dedic':840,1279 'defend':1079 'definit':1057 'delet':256,383,384,607,1166,1191 'depend':253,590 'deploy':29,66,429,1100,1460,1483 'deploying/managing':445 'descript':213 'design':19,56,293,670,674 'detail':327 'develop':11 'diagnos':218,551 'diagnost':465 'differ':333 'disabl':1027 'doc':181 'docker':286,829 'document':76,174 'e.g':101,117 'edge/offline':314 'enabl':737,828,1115 'encrypt':239,360,1108 'endpoint':842,882,1023 'endpoints/rbac':34 'enforc':348,1006 'entra':775,819,854 'error':225,485 'event':1252,1455 'exfiltr':373,847,1034 'expert':5,43 'export':1029 'extens':452,567,1099,1395,1489 'failur':233,509 'fallback':193 'faq':472 'featur':332,705 'fetch':77,173,182,195 'file':107,115,122,127 'firewal':863 'fix':220,488,553 'follow':596 'g':35 'gate':316,685 'geo':279,308,660 'geo-repl':278,307,659 'github':412,1406,1418 'github.com':165 'github.com/microsoftdocs/mcp/blob/main/readme.md)':164 'govern':303 'grant':1317 'guid':163 'guidanc':44,270 'health':223,461,484 'helm':424,1345 'host':1342 'ident':366,798,954,960,969,1313 'imag':252,255,262,283,305,321,340,361,427,589,609,619,690,715,996,1008,1076,1170,1208,1355,1378,1404,1416,1426,1441 'implement':684 'import':84,128,317,686,1353 'includ':12 'index':90,210 'instal':160,162 'instanc':1320 'integr':25,62,401,407,1299 'interpret':479 'ip':768 'issu':222,475,528,547,559,568,577 'key':576,946,1001,1109,1119,1133,1431 'knowledg':6 'known':474 'kubernet':276,410,635,1331 'l119':352 'l120':104,376 'l120-l137':375 'l137':377 'l138':405 'l138-l154':404 'l154':406 'l155':431 'l155-l160':430 'l160':432 'l35':103 'l35-l120':102 'l37':216 'l37-l52':215 'l52':217 'l53':243 'l53-l60':242 'l60':244 'l61':268 'l61-l67':267 'l67':269 'l68':296 'l68-l73':295 'l73':297 'l74':325 'l74-l79':324 'l79':326 'l80':351 'l80-l119':350 'latest':145 'learn':188,202 'learn-agent-skil':187,201 'learn.microsoft.com':467,477,490,502,511,520,530,539,549,561,570,581,594,605,616,628,643,654,667,682,694,709,719,735,746,759,771,782,794,805,815,826,837,849,860,873,884,894,907,918,931,943,956,965,979,992,1004,1014,1025,1036,1048,1061,1072,1083,1093,1102,1113,1125,1137,1151,1163,1174,1184,1195,1210,1221,1231,1243,1254,1264,1276,1286,1297,1315,1328,1340,1351,1362,1375,1387,1397,1411,1422,1435,1448,1458,1472,1481,1491 'learn.microsoft.com/en-us/azure/container-registry/allow-access-trusted-services':734 'learn.microsoft.com/en-us/azure/container-registry/anonymous-pull-access':745 'learn.microsoft.com/en-us/azure/container-registry/artifact-cache-acr-to-acr-cli':1314 'learn.microsoft.com/en-us/azure/container-registry/artifact-cache-cli':1150 'learn.microsoft.com/en-us/azure/container-registry/authenticate-aks-cross-tenant':758 'learn.microsoft.com/en-us/azure/container-registry/authenticate-kubernetes-options':642 'learn.microsoft.com/en-us/azure/container-registry/buffer-gate-public-content':593 'learn.microsoft.com/en-us/azure/container-registry/container-registry-access-selected-networks':770 'learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-aci':1327 'learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-kubernetes':1339 'learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-service-principal':781 'learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication':793 'learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication-managed-identity':804 'learn.microsoft.com/en-us/azure/container-registry/container-registry-auto-purge':1162 'learn.microsoft.com/en-us/azure/container-registry/container-registry-azure-policy':814 'learn.microsoft.com/en-us/azure/container-registry/container-registry-best-practices':604 'learn.microsoft.com/en-us/azure/container-registry/container-registry-check-health':466 'learn.microsoft.com/en-us/azure/container-registry/container-registry-configure-conditional-access':825 'learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust':836 'learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust-deprecation':653 'learn.microsoft.com/en-us/azure/container-registry/container-registry-dedicated-data-endpoints':848 'learn.microsoft.com/en-us/azure/container-registry/container-registry-delete':615 'learn.microsoft.com/en-us/azure/container-registry/container-registry-disable-authentication-as-arm':859 'learn.microsoft.com/en-us/azure/container-registry/container-registry-faq':476 'learn.microsoft.com/en-us/azure/container-registry/container-registry-firewall-access-rules':872 'learn.microsoft.com/en-us/azure/container-registry/container-registry-geo-replication':666 'learn.microsoft.com/en-us/azure/container-registry/container-registry-health-error-reference':489 'learn.microsoft.com/en-us/azure/container-registry/container-registry-helm-repos':1350 'learn.microsoft.com/en-us/azure/container-registry/container-registry-image-lock':1173 'learn.microsoft.com/en-us/azure/container-registry/container-registry-image-tag-version':627 'learn.microsoft.com/en-us/azure/container-registry/container-registry-import-images':1361 'learn.microsoft.com/en-us/azure/container-registry/container-registry-manage-artifact':1374 'learn.microsoft.com/en-us/azure/container-registry/container-registry-private-link':883 'learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-abac-repository-permissions':893 'learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-directory-reference':906 'learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-overview':917 'learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-custom-roles':930 'learn.microsoft.com/en-us/azure/container-registry/container-registry-retention-policy':1183 'learn.microsoft.com/en-us/azure/container-registry/container-registry-service-tag':942 'learn.microsoft.com/en-us/azure/container-registry/container-registry-skus':708 'learn.microsoft.com/en-us/azure/container-registry/container-registry-soft-delete-policy':1194 'learn.microsoft.com/en-us/azure/container-registry/container-registry-storage':718 'learn.microsoft.com/en-us/azure/container-registry/container-registry-task-run-template':1471 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-key-vault':955 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-managed-identity':964 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-cross-registry-authentication':978 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-logs':501 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-multi-step':1209 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-pack-build':1386 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-reference-yaml':1220 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-scheduled':1230 'learn.microsoft.com/en-us/azure/container-registry/container-registry-token-based-repository-permissions':991 'learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-arm-template':1480 'learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-cli':1396 'learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-troubleshooting':510 'learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-access':519 'learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-login-authn-authz':529 'learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-performance':538 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-sign-notation-artifact-signing':1410 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-verify-notation-artifact-signing':1421 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-multistep-task':1242 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-build-push':1434 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-trusted-ca':1003 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-verify-notation-artifact-signing':1447 'learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-verify-with-ratify-aks':1013 'learn.microsoft.com/en-us/azure/container-registry/container-registry-vnet':1024 'learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook':1457 'learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook-reference':1253 'learn.microsoft.com/en-us/azure/container-registry/data-loss-prevention':1035 'learn.microsoft.com/en-us/azure/container-registry/how-to-continuous-patching':1263 'learn.microsoft.com/en-us/azure/container-registry/intro-connected-registry':681 'learn.microsoft.com/en-us/azure/container-registry/manage-network-bypass-policy-for-tasks':1047 'learn.microsoft.com/en-us/azure/container-registry/monitor-container-registry-reference':1275 'learn.microsoft.com/en-us/azure/container-registry/policy-reference':1060 'learn.microsoft.com/en-us/azure/container-registry/pull-images-from-connected-registry':1071 'learn.microsoft.com/en-us/azure/container-registry/quickstart-connected-registry-arc-cli':1490 'learn.microsoft.com/en-us/azure/container-registry/scan-images-defender':1082 'learn.microsoft.com/en-us/azure/container-registry/security-controls-policy':1092 'learn.microsoft.com/en-us/azure/container-registry/tasks-agent-pools':1285 'learn.microsoft.com/en-us/azure/container-registry/tasks-consume-public-content':693 'learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-cache':548 'learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-streaming':560 'learn.microsoft.com/en-us/azure/container-registry/troubleshoot-connected-registry-arc':569 'learn.microsoft.com/en-us/azure/container-registry/tutorial-connected-registry-arc':1101 'learn.microsoft.com/en-us/azure/container-registry/tutorial-customer-managed-keys':1112 'learn.microsoft.com/en-us/azure/container-registry/tutorial-enable-customer-managed-keys':1124 'learn.microsoft.com/en-us/azure/container-registry/tutorial-rotate-revoke-customer-managed-keys':1136 'learn.microsoft.com/en-us/azure/container-registry/tutorial-troubleshoot-customer-managed-keys':580 'learn.microsoft.com/en-us/azure/container-registry/wildcards-artifact-cache':1296 'limit':21,58,322,337,696,707,717 'line':99,111,212 'link':116,125,881 'local':69 'locat':93 'lock':385,1167 'log':234,500,1269 'login':524 'login/auth':227 'make':17,54,266,631 'manag':250,365,494,575,587,612,797,953,959,968,1038,1107,1118,1132,1312,1344,1364 'manifest':1161,1182 'markdown':192,208 'mcp':151,178 'metadata.generated':132 'method':788 'metric':1267 'microsoft':180,774,818,853,1078 'microsoftdoc':152,179 'migrat':282,645 'mitig':844 'monitor':400,1266 'month':138 'multi':390,1199,1235 'multi-step':389,1198,1234 'network':170,228,358,517,731,940,1021,1041 'network-restrict':730 'notari':290,651 'notat':1409,1428,1443 'notif':1456 'oci':1365 'old':139 'oper':249,597 'option':637 'ora':414,1373 'pack':1384 'patch':392,1207,1258 'pattern':20,27,57,64,294,298,403,671,1301 'payload':1246 'perform':230,301,334,536 'permiss':890,986 'plan':277,656 'polici':363,809,822,1043,1056,1087,1178,1193 'pool':394,1281 'practic':15,52,241,246,584,599,624 'prefer':176 'prevent':368,1031 'princip':777,1326 'privat':33,880 'problem':231,537 'project':291,652 'provid':42 'public':251,320,588,689,765 'pull':143,306,420,739,1067,1332 'purg':1157 'purge/retention/soft':382 'push':1400 'queri':184,198 'queue':1463 'quick':71,439,463,1465 'quick-refer':70 'quota':22,59,323,344,697 'rang':100 'ratifi':1012 'rbac':357,904,911,924 'read':106,121 'refer':72,126,896,1050,1214,1270 'registri':4,10,38,48,236,312,448,471,497,507,516,535,544,556,565,603,613,641,665,678,703,714,744,757,764,792,803,835,871,878,900,916,929,936,973,990,1070,1097,1123,1218,1226,1251,1262,1274,1295,1337,1454,1487 'relev':94 'remot':75 'replic':280,309,661 'repositori':149,889,985,1172,1347 'requir':169 'restrict':732,761,1016 'retent':1177,1192 'return':191,207 'review':711 'revok':1129 'robust':261 'role':905,912,925 'rotat':1127 'rule':398,769,864,941,1291 'run':456,499,1467 'safe':254,610 'scan':1074 'schedul':1155,1223 'schema':1213,1247 'scope':856 'secret':421,948,1333 'section':95 'secur':23,60,349,353,721,875,1095 'security.md':118,119 'select':634 'servic':727,776,937,1022,1046,1325 'sign':284,647,994,1402,1414,1424,1437,1446 'signatur':1009 'signing/verification':362,428 'skill':39,41,83,168,190,204 'skill-azure-container-registry' 'sku':704 'skus':330 'soft':1190 'source-microsoftdocs' 'specifi':110 'step':391,1200,1236 'storag':258,341,614,716 'strategi':264,310 'stream':558 'string':185,199 'suggest':140,157 'suppli':1367 'tag':620,938,1159 'tagging/versioning':263 'task':386,440,498,951,963,977,1040,1202,1219,1227,1238,1284,1466 'templat':435,1470,1479 'tenant':751 'test':1205 'text/markdown':206 'throughput':336 'timer':388,1229 'token':983,1065 'token-bas':982 'tool':153 'topic':454,585,632,672,698,722,1140,1302,1461 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'transfer':417,443,508,1391,1476 'transfer/streaming/cache':232 'troubleshoot':13,50,214,453,504,513,522,532,541,563,572 'trust':288,725,831,1045 'unauthor':369 'untag':1180 'url':455,586,633,673,699,723,1141,1303,1462 'use':30,32,81,87,105,120,177,194,433,591,676,773,807,839,933,967,1147,1188,1197,1358,1381,1389,1429,1442,1477 'user':142,159 'vault':947,1002,1432 'verif':1010 'verifi':1413,1439 'version':146,622 'via':449,952,1000 'view':492 'virtual':1020 'webhook':395,422,1245,1452 'webpag':196 'wildcard':396,1289 'workflow':318,687,1241,1420 'yaml':387,1212","prices":[{"id":"c5ba0cd4-b486-47e1-b8cd-2e6f44b8f95e","listingId":"b498e752-ee1a-4311-a680-2defc0bbb99e","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T21:58:34.627Z"}],"sources":[{"listingId":"b498e752-ee1a-4311-a680-2defc0bbb99e","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-container-registry","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-container-registry","isPrimary":false,"firstSeenAt":"2026-04-18T21:58:34.627Z","lastSeenAt":"2026-05-18T18:53:50.715Z"}],"details":{"listingId":"b498e752-ee1a-4311-a680-2defc0bbb99e","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-container-registry","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":549,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-05-17T02:50:05Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"dab981bd7c7f23bab8f9d9cc8a2d5569c91eaa07","skill_md_path":"skills/azure-container-registry/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-container-registry"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-container-registry","description":"Expert knowledge for Azure Container Registry development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using private endpoints/RBAC, geo-replication, connected registries, ACR Tasks, or image signing/verification, and other Azure Container Registry related development tasks. Not for Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Red Hat OpenShift (use azure-redhat-openshift).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-container-registry"},"updatedAt":"2026-05-18T18:53:50.715Z"}}