Introducing ACR
ACR is a managed Docker registry service that we can use to store and distribute container images and other containerization artifacts. Other artifacts that we can store in ACR include Helm, which is a packaging format that is used to deploy applications for Kubernetes, such as Helm charts.
ACR is based on the open source Docker Registry 2.0 service, which is the same service that the popular Docker Hub registry (https://hub.docker.com/) is based on.
Because ACR is a managed service, we do not need to manage the underlying infrastructure, operating system (OS), or application; this gives us fewer security responsibilities to fulfill. Before we explore how to implement security for ACR, let's discuss how this service works. Figure 9.7 illustrates this clearly:
- First, we create a container registry with the Azure portal, Azure CLI, or Azure PowerShell. The registry will receive a fully qualified domain name that should be unique in the
acr.net
domain...