FreePublished on GitHub

azure-container-registry

Expert knowledge for Azure Container Registry development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when using ACR Tasks, geo-replication, connected registries, Kubernetes/ACI pulls, or Notation image signing, and other Azure Container Registry related development tasks. Not for Azure Container Apps (use azure-container-apps), Azure Container Instances (use azure-container-instances), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Red Hat OpenShift (use azure-redhat-openshift).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills

Works withGitHub Azure Docker Kubernetes

See how to install

Files included (1)

SKILL.md18.8 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Azure Container Registry Skill

This skill provides expert guidance for Azure Container Registry. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L52	Diagnosing and fixing ACR issues: health checks, error codes, login/auth, networking, performance, task logs, transfers, artifact cache/streaming, Arc extension, and CMK problems.
Best Practices	L53-L61	Best practices for ACR operations: managing public image dependencies, safe image deletion, tagging/versioning strategies, and securing registries, images, and access.
Decision Making	L62-L68	Guidance on choosing Kubernetes auth methods for ACR, deciding geo-replication strategy, and migrating image signing from Docker Content Trust to Notary Project
Architecture & Design Patterns	L69-L74	Patterns for ACR performance and governance: caching image pulls, geo-replication strategies, connected registries for edge/offline, and gated import workflows for public images.
Limits & Quotas	L75-L80	Details on ACR SKUs, performance and feature limits, plus how image storage capacity, repository counts, and size quotas are calculated and enforced
Security	L81-L119	Securing Azure Container Registry: auth methods, RBAC and ABAC, network/firewall/VNet rules, trusted services, image signing/verification, encryption keys, policies, and Defender-based scanning.
Configuration	L120-L140	Configuring Azure Container Registry behavior: caching, retention/soft delete, locks, IPv6, metrics/logs, webhooks, and ACR Tasks (YAML, scheduling, patching, agent pools).
Integrations & Coding Patterns	L141-L158	Integrating ACR with Kubernetes, ACI, GitHub Actions, ORAS, Helm, and webhooks; configuring auth, caching, transfers, image builds, and Notation-based signing/verification.
Deployment	L159-L163	Using ARM templates to automate ACR quick tasks and data transfer, and deploying/managing ACR connected registries via Azure Arc extension

Troubleshooting

Topic	URL
Run az acr check-health for quick ACR diagnostics	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-check-health
Troubleshoot common Azure Container Registry issues	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-faq
Interpret az acr check-health error codes and fixes	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-health-error-reference
View and manage Azure Container Registry task run logs	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-logs
Troubleshoot Azure Container Registry Transfer issues	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-troubleshooting
Troubleshoot Azure Container Registry network connectivity	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-access
Troubleshoot ACR login, authentication, and authorization issues	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-login-authn-authz
Diagnose and resolve Azure Container Registry performance issues	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-troubleshoot-performance
Troubleshoot Azure Container Registry artifact cache issues	https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-cache
Diagnose and fix Azure Container Registry artifact streaming issues	https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-artifact-streaming
Troubleshoot connected registry Arc extension issues	https://learn.microsoft.com/en-us/azure/container-registry/troubleshoot-connected-registry-arc
Troubleshoot customer-managed key issues in Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/tutorial-troubleshoot-customer-managed-keys

Best Practices

Topic	URL
Manage public image dependencies using ACR	https://learn.microsoft.com/en-us/azure/container-registry/buffer-gate-public-content
Follow operational best practices for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-best-practices
Delete ACR images safely to manage registry storage	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-delete
Apply image tagging and versioning best practices in ACR	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-image-tag-version
Apply security best practices to Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/secure-container-registry

Decision Making

Topic	URL
Select Kubernetes authentication options for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/authenticate-kubernetes-options
Migrate ACR signing from DCT to Notary Project	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust-deprecation
Decide when and how to use ACR geo-replication	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-geo-replication

Architecture & Design Patterns

Topic	URL
Design and use connected registries with ACR	https://learn.microsoft.com/en-us/azure/container-registry/intro-connected-registry
Implement gated import workflow for public images in ACR	https://learn.microsoft.com/en-us/azure/container-registry/tasks-consume-public-content

Limits & Quotas

Topic	URL
Compare Azure Container Registry SKU features and limits	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-skus
Review Azure Container Registry image storage limits	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-storage

Security

Topic	URL
Allow trusted Azure services to access network-restricted ACR	https://learn.microsoft.com/en-us/azure/container-registry/allow-access-trusted-services
Enable anonymous pull access for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/anonymous-pull-access
Configure cross-tenant AKS authentication to Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/authenticate-aks-cross-tenant
Restrict Azure Container Registry public access by IP rules	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-access-selected-networks
Use Microsoft Entra service principals to access ACR	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-service-principal
Choose and configure authentication methods for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication
Configure managed identity authentication to Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-authentication-managed-identity
Use Azure Policy to audit ACR compliance	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-azure-policy
Configure Microsoft Entra Conditional Access policies for ACR	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-configure-conditional-access
Enable Docker Content Trust for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-content-trust
Use dedicated data endpoints to secure ACR traffic	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-dedicated-data-endpoints
Control accepted Microsoft Entra auth scopes for ACR	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-disable-authentication-as-arm
Configure firewall rules for Azure Container Registry access	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-firewall-rules
Configure Azure ABAC repository permissions in Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-abac-repository-permissions
Reference for Azure Container Registry built-in RBAC roles	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-directory-reference
Assign and manage ACR RBAC built-in roles	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-built-in-roles-overview
Create and assign custom RBAC roles for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-rbac-custom-roles
Use Azure Container Registry service tags for network rules	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-service-tag
Access Key Vault secrets from ACR Tasks via managed identity	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-key-vault
Configure managed identity for ACR Tasks	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-authentication-managed-identity
Use managed identity for cross-registry auth in ACR Tasks	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-cross-registry-authentication
Configure token-based repository permissions in Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-token-based-repository-permissions
Sign ACR images with CA certs via Key Vault	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-trusted-ca
Enforce AKS image signature verification with Ratify	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-verify-with-ratify-aks
Restrict ACR access with virtual network service endpoints	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-vnet
Disable artifact export to prevent ACR data exfiltration	https://learn.microsoft.com/en-us/azure/container-registry/data-loss-prevention
Manage ACR Tasks network bypass policy with trusted services	https://learn.microsoft.com/en-us/azure/container-registry/manage-network-bypass-policy-for-tasks
Reference of built-in Azure Policy definitions for ACR	https://learn.microsoft.com/en-us/azure/container-registry/policy-reference
Configure client tokens to pull from connected registries	https://learn.microsoft.com/en-us/azure/container-registry/pull-images-from-connected-registry
Scan ACR images with Microsoft Defender for Cloud	https://learn.microsoft.com/en-us/azure/container-registry/scan-images-defender
Apply Azure Policy compliance controls to ACR	https://learn.microsoft.com/en-us/azure/container-registry/security-controls-policy
Secure connected registry Arc extension deployments	https://learn.microsoft.com/en-us/azure/container-registry/tutorial-connected-registry-arc
Configure customer-managed encryption keys for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/tutorial-customer-managed-keys
Enable customer-managed keys on Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/tutorial-enable-customer-managed-keys
Rotate and revoke customer-managed keys for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/tutorial-rotate-revoke-customer-managed-keys

Configuration

Topic	URL
Enable and configure artifact cache in ACR using Azure CLI	https://learn.microsoft.com/en-us/azure/container-registry/artifact-cache-cli
Enable artifact cache in Azure Container Registry via portal	https://learn.microsoft.com/en-us/azure/container-registry/artifact-cache-portal
Configure acr purge for automated image cleanup in ACR	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auto-purge
Reference Azure Container Registry endpoint types and flags	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-endpoint-reference
Configure image and repository locks in Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-image-lock
Enable IPv6 dual-stack endpoints for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-ipv6-dual-stack
Configure retention policy for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-retention-policy
Configure and use ACR soft delete retention policy	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-soft-delete-policy
Use multi-step ACR Tasks to build, test, and patch images	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-multi-step
YAML schema reference for Azure Container Registry Tasks	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-reference-yaml
Schedule Azure Container Registry Tasks with timers	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-scheduled
Configure multi-step ACR Tasks for build workflows	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-multistep-task
Webhook payload schema for Azure Container Registry events	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook-reference
Configure continuous patching for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/how-to-continuous-patching
Reference monitoring metrics and logs for Azure Container Registry	https://learn.microsoft.com/en-us/azure/container-registry/monitor-container-registry-reference
Configure dedicated agent pools for ACR Tasks	https://learn.microsoft.com/en-us/azure/container-registry/tasks-agent-pools
Configure wildcard rules for ACR artifact cache	https://learn.microsoft.com/en-us/azure/container-registry/wildcards-artifact-cache

Integrations & Coding Patterns

Topic	URL
Configure ACR-to-ACR artifact caching with managed identity	https://learn.microsoft.com/en-us/azure/container-registry/artifact-cache-acr-to-acr-cli
Grant Azure Container Instances access to ACR with service principals	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-aci
Create Kubernetes pull secrets for Azure Container Registry access	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-auth-kubernetes
Host and manage Helm chart repositories in ACR	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-helm-repos
Import images and artifacts into Azure Container Registry via Azure APIs	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-import-images
Manage OCI and supply chain artifacts in ACR with ORAS	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-manage-artifact
Build images with Buildpacks using az acr pack build	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tasks-pack-build
Automate ACR Transfer using ARM templates	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-arm-template
Use ACR Transfer with Azure CLI extension	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-transfer-cli
Build, push, and sign ACR images in GitHub Actions with Notation	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-sign-notation-artifact-signing
Verify signed ACR images in GitHub Actions workflows	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-github-verify-notation-artifact-signing
Sign ACR images with Notation using Azure Key Vault certificates	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-build-push
Sign and verify ACR images using Notation and Artifact Signing	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-tutorial-sign-verify-notation-artifact-signing
Configure ACR webhooks for registry event notifications	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-webhook

Deployment

Topic	URL
Queue ACR quick task runs with ARM templates	https://learn.microsoft.com/en-us/azure/container-registry/container-registry-task-run-template
Deploy the ACR connected registry Arc extension	https://learn.microsoft.com/en-us/azure/container-registry/quickstart-connected-registry-arc-cli

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

More skills from this repository

azure-active-directory-b2c

Free

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-advisor

Free

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing Advisor alerts, digests, recommendation states, Resource Graph queries, or RBAC access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-ai-vision

Free

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-aks-edge-essentials

Free

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local, GitOps, IoT/OPC/ONVIF, or Key Vault-integrated workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-analysis-services

Free

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

azure-anyscale-on-azure

Free

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when registering AKS as Anyscale clouds, wiring ACR images, enabling Private Link/RBAC, ARM-based deployments, or region checks, and other Azure Anyscale On Azure related development tasks. Not for Azure Databricks (use azure-databricks), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Machine Learning (use azure-machine-learning), Azure HDInsight (use azure-hdinsight).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

See all skills by MicrosoftDocs

Report a problem with this skill

Install

Install with a command

npx skills add https://github.com/MicrosoftDocs/Agent-Skills --skill azure-container-registry

Paste it into your terminal and run it (requires Node.js). You can choose which agents to install it for, such as Claude Code or Codex.

Ask your agent

Please install the following Agent Skill.
https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-container-registry

First review SKILL.md and the bundled files and confirm there is nothing suspicious (such as sending data externally or reading credentials). Then place it in ~/.claude/skills/azure-container-registry/ for Claude Code, or ~/.agents/skills/azure-container-registry/ for Codex.

Send this text to Claude Code or Codex as is. It checks the contents before installing.

View source on GitHub

Repository: MicrosoftDocs/Agent-Skills
Stars: 786
Forks: 128
Category: DevOps
License: CC-BY-4.0
Original language: English
Last updated: Oct 19, 2026

A skill is a set of instructions and scripts for an agent. cccskills does not guarantee that skills are safe. Review the contents before you install.