Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more here.

Azure Container Registry

Have feedback for the Azure Container Registry? Submit your idea or vote up an idea submitted by others. All of the feedback you share here will be monitored and reviewed by the Azure Container Registry team. Remember that this site is only for feature suggestions and ideas. If you have technical questions or issues, please submit them to our GitHub issues page or on StackOverflow

  1. Increase IP range limit in ACR whitelisting

    I would like to increase this limit because I am trying to add 200 IP ranges that belongs to Azure Cloud West Europe in order for my Azure Pipelines be able to push to ACR. These IPs belongs to Microsoft, not my company and I would like to have a feature to facilitate the security between Azure DevOps and ACR OR an increase in the range. Talking to microsoft support the alternative was to have self hosted agents which is not a good idea for us at the moment since we are starting with Azure DevOps and also we don't…

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    2 comments  ·  Flag idea as inappropriate…  ·  Admin →
  2. Folder based filtering of Github triggers

    Triggers setup that specify a folder in a Github repo should only trigger the ACR task on changes to files within the specified folder.

    Is it possible to only trigger on a push for the contents of the folder? Otherwise it looks like we can only have one task per repo to avoid triggerring for all pushed conents.

    In the example below I'd expect that a Task run only to occur when the contents of "Folder" is changed.

    az acr task create -t hello-world:{{.Run.ID}} -n hello-world -r MyRegistry -c https://msazure.visualstudio.com/DefaultCollection/Project/_git/Repo#Branch:Folder -f Dockerfile --git-access-token <Personal Access Token> --platform linux/arm/v7

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  3. Filter to purge images not used/pulled in last n days.

    The option of purging older than n days does not satisfy our needs. We have many images as result of Build process but not all end up being used.

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  4. ACR - Key rotation with notary cli fails with authorization error (401)

    In case of key compromise, DCT supports key rotation via notary cli:
    $ notary -s https://notary.docker.io -d ~/.docker/trust key rotate prash1990/helloworld targets
    Enter passphrase for new targets key with ID 3cc535f:
    Repeat passphrase for new targets key with ID 3cc535f:
    Enter username: prash1990
    Enter password:
    Enter passphrase for root key with ID e8f29fb:
    Successfully rotated targets key for repository prash1990/helloworld

    But when similar opration is not supported by ACR:
    $ notary -s https://pradockerdemo.azurecr.io -d ~/.docker/trust key rotate pradockerdemo.azurecr.io/helloworld targets
    Enter passphrase for new targets key with ID dfa5606:
    Repeat passphrase for new targets key with ID dfa5606:
    Enter username: admin …

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  5. Support GitHub Enterprise for ACR Task triggers

    Currently Azure Container Registry does not support commit or pull request triggers in GitHub Enterprise repositories.

    I have several clients that use GitHub Enterprise that cannot make use of the ACR Task commit or PR triggers. Please add the support for GitHub Enterprise.

    3 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  6. Monitoring network traffic for pull/push operation

    Currently, we can monitor pull/push counts by Azure Monitor.
    https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/metrics-supported#microsoftcontainerregistryregistries

    Otherwise, we need to check the status of network traffic for investigating slow operation.
    (Azurespeed is viable for checking current status, but not suitable for trend/history)

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  7. Add a Powershell cmdlet to get ACR image list and their sizes

    Since ACR is billed by size of images pushed, I'd like a way to programmatically check the capacity I'm using at any time

    Give us some cmdlet like

    Get-AzContainerRegistryImages resulting in array of acrimage details (created, last updated, ... and MOST IMPORTANT SIZE TAKEN IN ACR)

    so that I can do my computation and filtering with where-object / select-object

    az cli has some commands
    az acr repository list and show
    but not giving size and then I don't like it beacuse it's not programmable like powershell

    Thanks

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  8. Allow access at repository level in generic/masked manner.

    New feature https://feedback.azure.com/forums/903958-azure-container-registry/suggestions/31655977-configure-permissions-at-a-repository-level is wonderful. But access is given in a very detailed manner.

    Please add a generic/masked manner as


    • image -> registry-url/group-repo/image:tag

    • access level -> registry-url/group-repo/*

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  9. Need built-in role for `az acr build`

    Need a ACR's remote build capability role that is similar to Contributor role but without Delete Registry and Manage Policies permissions.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  10. Support Per-Repository Permissions in Azure Container Registry

    The granularity of Azure Container Registry's permissions is currently at the Registry level. If a service principal has write access, it can write to any repository in the registry. This becomes cumbersome when more specificity is needed to limit certain users to certain repositories.

    A common example is a CI/CD pipeline: If I support a dev/test Docker repository that is constantly being pushed by a build server, that service principal can write to the any repository in the registry. It is unwise to use the same Container Registry to house the output of production builds, especially if there is a…

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  11. Integrate ACR Task logs to Log Analytics

    We have a customer want to run ACR scheduling task to synchronize their Docker Images from external docker registry, since the task is just a docker container, could ACR also integrate with Log Analytics to auto capture the docker container stdout/stderr just like what AKS did, it would be easier for us to monitoring how the ACR scheduling task executed.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  12. ACR User Interface

    Please advise if it is recommended and support User Interface for Azure Container Registry.

    UI should be accessible thru browser and support the same Access Control as for docker login.

    Found one repo: https://github.com/Azure/acr-web-manager
    but not sure if it is recommended and supported by Azure.

    I plan to have 8TB ACR with 20 users online at the same time.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  13. Build tasks for VNET-integrated ACR instances

    Currently, ACR Tasks do not work for instances with the preview VNET / firewall configuration enabled. This will block usability of ACR for organizations that require increased network security.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  14. Helm repo at ACR - allow to disable --force option

    Azure CLI allows to overwrite helm chart using --force option.
    This option should be possible to disable for whole registry.
    For production cases, helm charts should not be allowed to be overwritten.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  15. Retention period for images

    Retention period for images- will be a good idea.
    For example, images older than X days drop, but store at least 1 image.
    It's not about purging or usage tracking. it's about Retention only.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  16. Automatic retry of the ACR webhook on 504-status (operation timed out)

    Sometimes when we deploy new image-version to the registry the webhook push-operation fails with 504 (operation timed out) status code. When this happens we have to manually restart the webapp to apply latest changes. Would be great if the webhook could retry such timed out operations number of times before e.g. sending the error to monitoring or email.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  17. Allow to authenticate via `az acr login` via custom domain (proxied)

    we're exposing ACRs via a reverse proxy running our own custom domain.
    authentication via docker login´ and a service principal works fine, but it isn&#39;t possible to useaz acr loginthat way.
    it would be great if
    az acr loginsupports an additional argument e.g.--custom-domain registry.mydomain.net` so we don't need to create multiple service principals for each user.
    this is also logged here: https://github.com/Azure/acr/issues/102#issuecomment-406382843

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    1 comment  ·  Flag idea as inappropriate…  ·  Admin →
  18. Enable geo-replication for on-prem usage

    When running containers outside of azure, support the ability to build on-prem, push locally, and have it geo-replication up to ACR.
    As i have nodes running on-prem and in Azure with AKS, I'd like to have one registry, one collection of images that are replicated across both.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  19. Enable Azure Container Registry for Bizspark subscriptions

    The Azure Container Registry Resource Provider does not support BizSpark subscription types. Please enable it.

    2 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  20. registry name

    it would be helpful if you could allow minus and underscore in container registry names.

    1 vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Azure Container Registry

Categories

Feedback and Knowledge Base