What problem does it solve? Managing container registries in Azure involves many distinct concerns—authentication, image builds, repository cleanup, networking, and geo-replication—and using the wrong command or security posture leads to broken pipelines and exposed registries. This Skill provides structured, security-first guidance for operating Azure Container Registry with the az acr CLI. ## Core Features & Use Cases - Cloud-based image builds: Compile and push container images with az acr build and ACR Tasks, without requiring a local Docker daemon, including git triggers, base-image triggers, and multi-step task YAML. - Secure authentication patterns: Configure Microsoft Entra RBAC roles (AcrPull/AcrPush or ABAC repository roles), managed identities, AKS integration via --attach-acr, and repository-scoped tokens while keeping the admin user disabled. - Repository lifecycle management: Import images server-side, untag versus delete manifests, schedule cleanup with acr purge, lock critical tags, and monitor storage usage. - Use Case: Your team needs to push a Spring Boot image to ACR and let AKS pull it without admin credentials. The Skill produces a command plan: build with az acr build, then grant the kubelet managed identity the AcrPull role. ## Quick Start Ask the assistant to build your container image in Azure Container Registry and configure secure pull access for your AKS cluster using managed identities.
