Community

Loading...

Azure Container Registry

160 Ideas

ACR - proxy cache for external docker registries

We would like to use ACR for hosting images created on public cloud, but also as a single endpoint registry for pulling images that are hosted on-prem or from external registries like dockerhub, gcr. Other OSS registry products like Nexus OSS provide this feature to act like a proxy or �pull-through cache� for Docker Registries and helm repositories. This proxy should also support token based authentication to integrate with registries that require auth.This would be useful for enterprises moving from on-prem to cloud to have a means to expose on-prem hosted images on cloud.

Company Response

To learn more about ACR artifact cache, please visit https://aka.ms/acr/cache

ACR login with podman

Tracking feature request: https://github.com/Azure/azure-cli/issues/14768Describe the bug az acr login --name registry You may want to use 'az acr login -n registry --expose-token' to get an access token, which does not require Docker to be installed. An error occurred: DOCKERCOMMANDERROR Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msgTo Reproduce install: podman, podman-docker emulator for CLIExpected behavior az acr login to workEnvironment summary RHEL8. Rhel8 does not have docker anymore. If you do dnf install docker it will install podman and podman-docker for CLI backwards compatibility.Additional context With growing podman addition would be good for this to work out of the box. With or without podman-docker package.

Archived

All Ideas

Terence Truong

Company Response

11 months ago

Closing as the GitHub issue is archived

ACR- Auto Purge

As registries are filled with automated image builds, they wind up filling with layers that never get used. Auto-purge will track image usage and move unused layers to a recycle bin, allowing subsequent purging. The feature will be configured and managed, with reasonable defaults, assuring you'll never lose anything you really wanted to keep.

Company Response

We�ve started the Auto-Purge work, with this current design: https://github.com/AzureCR/specs/tree/master/auto-purgePlease provide feedback here: https://github.com/AzureCR/specs/issues/1

Integrate Vulnerability Scanning directly into ACR

Company Response

To get integration stated, we�ve added links to Aqua and Twistlock from overview within a configured registry.Over time, we�ll provide a more integrated experience, where ACR has vulnerability scanning integrated into the image listing.

Show Dockerfile LABELs in ACR

Was asked to elevate this idea here from https://github.com/Azure/acr/issues/247Put simply, it would be really nice if the ACR showed the LABEL data that was set in the Dockerfiles.

Under Review

All Ideas

Allow wildcard in scopemap repository/namespace configuration

At present scopemap configurations are at a repository level. It would be very helpful to allow configuration at namespace/repository level with the support of wildcards.For example /org/dept1/repo1 /org/dept1/repo2 /org/dept2/repo1 /org/dept2/subdep1/repo1So if I want to create a token for pulling all images in /org/dept2/ and its sub paths , allowing configuration like /org/dept2/* in scopemap would make it extremely easy rather than going and adding each repo manually in the scope map.

Expose ACR Audit logs to enduser

Please expose ACR Audit logs to endusers so that they can see a trail of who downloaded/ pushed images to a registry.

Company Response

We�ve started the design, and would welcome any additional feedback.

Make Service Principals Easier To Configure for Headless Scenarios

az acr login enables individual identity when working locally. However, headless scenarios like Continuous Build and Deployment solutions need authentication, that isn't tied to a person. Azure Active Directory provides Service Principals for just this scenario. However, Service Principals are difficult to configure and manage. ACR would make it easier to configure and manage service principals.

Company Response

Based on all the great feedback, we�re adding token based authentication to the repo-based permissions capability. Customers can configure time based tokens, for access to specific repos, with RBAC. We don�t have an ETA yet, but we expect to be in preview by this summer.

Private Helm repository has no interface in portal

While using ACR for our private helm repository I realized there is no interface in the portal for working with/ viewing helm charts. It would be nice if I could at least see the results of�helm search {acrname}�in the portal somehow.

Company Response

We love this feature, but wanted to support more than just Helm. We�ve been working with the OCI working group to define registry artifacts, which enable a registry to store lots of things, from Helm Charts, CNAB, to other things we don�t yet know of.For some of the experience, see: https://github.com/stevelasker/registryArtifactTypes/We�ll also enable this in our az acr repository list CLI.(name)

Registry Backup/Restore

Enable Backup and point in time restore of Registry

Need More Information

Filters

Quick links