Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Classic
  3. API Docs
  4. containerservice
  5. Packages

We recommend using Azure Native.

Azure v6.21.0 published on Friday, Mar 7, 2025 by Pulumi
pulumi/pulumi-azure

azure.containerservice.Registry

Explore with Pulumi AI

azure logo

We recommend using Azure Native.

Azure v6.21.0 published on Friday, Mar 7, 2025 by Pulumi
pulumi/pulumi-azure

    Manages an Azure Container Registry.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = new azure.core.ResourceGroup("example", {
    name: "example-resources",
    location: "West Europe",
});
const acr = new azure.containerservice.Registry("acr", {
    name: "containerRegistry1",
    resourceGroupName: example.name,
    location: example.location,
    sku: "Premium",
    adminEnabled: false,
    georeplications: [
        {
            location: "East US",
            zoneRedundancyEnabled: true,
            tags: {},
        },
        {
            location: "North Europe",
            zoneRedundancyEnabled: true,
            tags: {},
        },
    ],
});

    import pulumi
import pulumi_azure as azure

example = azure.core.ResourceGroup("example",
    name="example-resources",
    location="West Europe")
acr = azure.containerservice.Registry("acr",
    name="containerRegistry1",
    resource_group_name=example.name,
    location=example.location,
    sku="Premium",
    admin_enabled=False,
    georeplications=[
        {
            "location": "East US",
            "zone_redundancy_enabled": True,
            "tags": {},
        },
        {
            "location": "North Europe",
            "zone_redundancy_enabled": True,
            "tags": {},
        },
    ])

    package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/containerservice"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		_, err = containerservice.NewRegistry(ctx, "acr", &containerservice.RegistryArgs{
			Name:              pulumi.String("containerRegistry1"),
			ResourceGroupName: example.Name,
			Location:          example.Location,
			Sku:               pulumi.String("Premium"),
			AdminEnabled:      pulumi.Bool(false),
			Georeplications: containerservice.RegistryGeoreplicationArray{
				&containerservice.RegistryGeoreplicationArgs{
					Location:              pulumi.String("East US"),
					ZoneRedundancyEnabled: pulumi.Bool(true),
					Tags:                  pulumi.StringMap{},
				},
				&containerservice.RegistryGeoreplicationArgs{
					Location:              pulumi.String("North Europe"),
					ZoneRedundancyEnabled: pulumi.Bool(true),
					Tags:                  pulumi.StringMap{},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resources",
        Location = "West Europe",
    });

    var acr = new Azure.ContainerService.Registry("acr", new()
    {
        Name = "containerRegistry1",
        ResourceGroupName = example.Name,
        Location = example.Location,
        Sku = "Premium",
        AdminEnabled = false,
        Georeplications = new[]
        {
            new Azure.ContainerService.Inputs.RegistryGeoreplicationArgs
            {
                Location = "East US",
                ZoneRedundancyEnabled = true,
                Tags = null,
            },
            new Azure.ContainerService.Inputs.RegistryGeoreplicationArgs
            {
                Location = "North Europe",
                ZoneRedundancyEnabled = true,
                Tags = null,
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.containerservice.Registry;
import com.pulumi.azure.containerservice.RegistryArgs;
import com.pulumi.azure.containerservice.inputs.RegistryGeoreplicationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example-resources")
            .location("West Europe")
            .build());

        var acr = new Registry("acr", RegistryArgs.builder()
            .name("containerRegistry1")
            .resourceGroupName(example.name())
            .location(example.location())
            .sku("Premium")
            .adminEnabled(false)
            .georeplications(            
                RegistryGeoreplicationArgs.builder()
                    .location("East US")
                    .zoneRedundancyEnabled(true)
                    .tags()
                    .build(),
                RegistryGeoreplicationArgs.builder()
                    .location("North Europe")
                    .zoneRedundancyEnabled(true)
                    .tags()
                    .build())
            .build());

    }
}

    resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resources
      location: West Europe
  acr:
    type: azure:containerservice:Registry
    properties:
      name: containerRegistry1
      resourceGroupName: ${example.name}
      location: ${example.location}
      sku: Premium
      adminEnabled: false
      georeplications:
        - location: East US
          zoneRedundancyEnabled: true
          tags: {}
        - location: North Europe
          zoneRedundancyEnabled: true
          tags: {}

    Encryption)

    import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const exampleResourceGroup = new azure.core.ResourceGroup("example", {
    name: "example-resources",
    location: "West Europe",
});
const exampleUserAssignedIdentity = new azure.authorization.UserAssignedIdentity("example", {
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
    name: "registry-uai",
});
const example = azure.keyvault.getKey({
    name: "super-secret",
    keyVaultId: existing.id,
});
const acr = new azure.containerservice.Registry("acr", {
    name: "containerRegistry1",
    resourceGroupName: exampleResourceGroup.name,
    location: exampleResourceGroup.location,
    sku: "Premium",
    identity: {
        type: "UserAssigned",
        identityIds: [exampleUserAssignedIdentity.id],
    },
    encryption: {
        keyVaultKeyId: example.then(example => example.id),
        identityClientId: exampleUserAssignedIdentity.clientId,
    },
});

    import pulumi
import pulumi_azure as azure

example_resource_group = azure.core.ResourceGroup("example",
    name="example-resources",
    location="West Europe")
example_user_assigned_identity = azure.authorization.UserAssignedIdentity("example",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location,
    name="registry-uai")
example = azure.keyvault.get_key(name="super-secret",
    key_vault_id=existing["id"])
acr = azure.containerservice.Registry("acr",
    name="containerRegistry1",
    resource_group_name=example_resource_group.name,
    location=example_resource_group.location,
    sku="Premium",
    identity={
        "type": "UserAssigned",
        "identity_ids": [example_user_assigned_identity.id],
    },
    encryption={
        "key_vault_key_id": example.id,
        "identity_client_id": example_user_assigned_identity.client_id,
    })

    package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/authorization"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/containerservice"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/keyvault"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleUserAssignedIdentity, err := authorization.NewUserAssignedIdentity(ctx, "example", &authorization.UserAssignedIdentityArgs{
			ResourceGroupName: exampleResourceGroup.Name,
			Location:          exampleResourceGroup.Location,
			Name:              pulumi.String("registry-uai"),
		})
		if err != nil {
			return err
		}
		example, err := keyvault.LookupKey(ctx, &keyvault.LookupKeyArgs{
			Name:       "super-secret",
			KeyVaultId: existing.Id,
		}, nil)
		if err != nil {
			return err
		}
		_, err = containerservice.NewRegistry(ctx, "acr", &containerservice.RegistryArgs{
			Name:              pulumi.String("containerRegistry1"),
			ResourceGroupName: exampleResourceGroup.Name,
			Location:          exampleResourceGroup.Location,
			Sku:               pulumi.String("Premium"),
			Identity: &containerservice.RegistryIdentityArgs{
				Type: pulumi.String("UserAssigned"),
				IdentityIds: pulumi.StringArray{
					exampleUserAssignedIdentity.ID(),
				},
			},
			Encryption: &containerservice.RegistryEncryptionArgs{
				KeyVaultKeyId:    pulumi.String(example.Id),
				IdentityClientId: exampleUserAssignedIdentity.ClientId,
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var exampleResourceGroup = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resources",
        Location = "West Europe",
    });

    var exampleUserAssignedIdentity = new Azure.Authorization.UserAssignedIdentity("example", new()
    {
        ResourceGroupName = exampleResourceGroup.Name,
        Location = exampleResourceGroup.Location,
        Name = "registry-uai",
    });

    var example = Azure.KeyVault.GetKey.Invoke(new()
    {
        Name = "super-secret",
        KeyVaultId = existing.Id,
    });

    var acr = new Azure.ContainerService.Registry("acr", new()
    {
        Name = "containerRegistry1",
        ResourceGroupName = exampleResourceGroup.Name,
        Location = exampleResourceGroup.Location,
        Sku = "Premium",
        Identity = new Azure.ContainerService.Inputs.RegistryIdentityArgs
        {
            Type = "UserAssigned",
            IdentityIds = new[]
            {
                exampleUserAssignedIdentity.Id,
            },
        },
        Encryption = new Azure.ContainerService.Inputs.RegistryEncryptionArgs
        {
            KeyVaultKeyId = example.Apply(getKeyResult => getKeyResult.Id),
            IdentityClientId = exampleUserAssignedIdentity.ClientId,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.authorization.UserAssignedIdentity;
import com.pulumi.azure.authorization.UserAssignedIdentityArgs;
import com.pulumi.azure.keyvault.KeyvaultFunctions;
import com.pulumi.azure.keyvault.inputs.GetKeyArgs;
import com.pulumi.azure.containerservice.Registry;
import com.pulumi.azure.containerservice.RegistryArgs;
import com.pulumi.azure.containerservice.inputs.RegistryIdentityArgs;
import com.pulumi.azure.containerservice.inputs.RegistryEncryptionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleResourceGroup = new ResourceGroup("exampleResourceGroup", ResourceGroupArgs.builder()
            .name("example-resources")
            .location("West Europe")
            .build());

        var exampleUserAssignedIdentity = new UserAssignedIdentity("exampleUserAssignedIdentity", UserAssignedIdentityArgs.builder()
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .name("registry-uai")
            .build());

        final var example = KeyvaultFunctions.getKey(GetKeyArgs.builder()
            .name("super-secret")
            .keyVaultId(existing.id())
            .build());

        var acr = new Registry("acr", RegistryArgs.builder()
            .name("containerRegistry1")
            .resourceGroupName(exampleResourceGroup.name())
            .location(exampleResourceGroup.location())
            .sku("Premium")
            .identity(RegistryIdentityArgs.builder()
                .type("UserAssigned")
                .identityIds(exampleUserAssignedIdentity.id())
                .build())
            .encryption(RegistryEncryptionArgs.builder()
                .keyVaultKeyId(example.applyValue(getKeyResult -> getKeyResult.id()))
                .identityClientId(exampleUserAssignedIdentity.clientId())
                .build())
            .build());

    }
}

    resources:
  exampleResourceGroup:
    type: azure:core:ResourceGroup
    name: example
    properties:
      name: example-resources
      location: West Europe
  acr:
    type: azure:containerservice:Registry
    properties:
      name: containerRegistry1
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
      sku: Premium
      identity:
        type: UserAssigned
        identityIds:
          - ${exampleUserAssignedIdentity.id}
      encryption:
        keyVaultKeyId: ${example.id}
        identityClientId: ${exampleUserAssignedIdentity.clientId}
  exampleUserAssignedIdentity:
    type: azure:authorization:UserAssignedIdentity
    name: example
    properties:
      resourceGroupName: ${exampleResourceGroup.name}
      location: ${exampleResourceGroup.location}
      name: registry-uai
variables:
  example:
    fn::invoke:
      function: azure:keyvault:getKey
      arguments:
        name: super-secret
        keyVaultId: ${existing.id}

    Attaching A Container Registry To A Kubernetes Cluster)

    import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = new azure.core.ResourceGroup("example", {
    name: "example-resources",
    location: "West Europe",
});
const exampleRegistry = new azure.containerservice.Registry("example", {
    name: "containerRegistry1",
    resourceGroupName: example.name,
    location: example.location,
    sku: "Premium",
});
const exampleKubernetesCluster = new azure.containerservice.KubernetesCluster("example", {
    name: "example-aks1",
    location: example.location,
    resourceGroupName: example.name,
    dnsPrefix: "exampleaks1",
    defaultNodePool: {
        name: "default",
        nodeCount: 1,
        vmSize: "Standard_D2_v2",
    },
    identity: {
        type: "SystemAssigned",
    },
    tags: {
        Environment: "Production",
    },
});
const exampleAssignment = new azure.authorization.Assignment("example", {
    principalId: exampleKubernetesCluster.kubeletIdentity.apply(kubeletIdentity => kubeletIdentity.objectId),
    roleDefinitionName: "AcrPull",
    scope: exampleRegistry.id,
    skipServicePrincipalAadCheck: true,
});

    import pulumi
import pulumi_azure as azure

example = azure.core.ResourceGroup("example",
    name="example-resources",
    location="West Europe")
example_registry = azure.containerservice.Registry("example",
    name="containerRegistry1",
    resource_group_name=example.name,
    location=example.location,
    sku="Premium")
example_kubernetes_cluster = azure.containerservice.KubernetesCluster("example",
    name="example-aks1",
    location=example.location,
    resource_group_name=example.name,
    dns_prefix="exampleaks1",
    default_node_pool={
        "name": "default",
        "node_count": 1,
        "vm_size": "Standard_D2_v2",
    },
    identity={
        "type": "SystemAssigned",
    },
    tags={
        "Environment": "Production",
    })
example_assignment = azure.authorization.Assignment("example",
    principal_id=example_kubernetes_cluster.kubelet_identity.object_id,
    role_definition_name="AcrPull",
    scope=example_registry.id,
    skip_service_principal_aad_check=True)

    package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/authorization"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/containerservice"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleRegistry, err := containerservice.NewRegistry(ctx, "example", &containerservice.RegistryArgs{
			Name:              pulumi.String("containerRegistry1"),
			ResourceGroupName: example.Name,
			Location:          example.Location,
			Sku:               pulumi.String("Premium"),
		})
		if err != nil {
			return err
		}
		exampleKubernetesCluster, err := containerservice.NewKubernetesCluster(ctx, "example", &containerservice.KubernetesClusterArgs{
			Name:              pulumi.String("example-aks1"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			DnsPrefix:         pulumi.String("exampleaks1"),
			DefaultNodePool: &containerservice.KubernetesClusterDefaultNodePoolArgs{
				Name:      pulumi.String("default"),
				NodeCount: pulumi.Int(1),
				VmSize:    pulumi.String("Standard_D2_v2"),
			},
			Identity: &containerservice.KubernetesClusterIdentityArgs{
				Type: pulumi.String("SystemAssigned"),
			},
			Tags: pulumi.StringMap{
				"Environment": pulumi.String("Production"),
			},
		})
		if err != nil {
			return err
		}
		_, err = authorization.NewAssignment(ctx, "example", &authorization.AssignmentArgs{
			PrincipalId: pulumi.String(exampleKubernetesCluster.KubeletIdentity.ApplyT(func(kubeletIdentity containerservice.KubernetesClusterKubeletIdentity) (*string, error) {
				return &kubeletIdentity.ObjectId, nil
			}).(pulumi.StringPtrOutput)),
			RoleDefinitionName:           pulumi.String("AcrPull"),
			Scope:                        exampleRegistry.ID(),
			SkipServicePrincipalAadCheck: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resources",
        Location = "West Europe",
    });

    var exampleRegistry = new Azure.ContainerService.Registry("example", new()
    {
        Name = "containerRegistry1",
        ResourceGroupName = example.Name,
        Location = example.Location,
        Sku = "Premium",
    });

    var exampleKubernetesCluster = new Azure.ContainerService.KubernetesCluster("example", new()
    {
        Name = "example-aks1",
        Location = example.Location,
        ResourceGroupName = example.Name,
        DnsPrefix = "exampleaks1",
        DefaultNodePool = new Azure.ContainerService.Inputs.KubernetesClusterDefaultNodePoolArgs
        {
            Name = "default",
            NodeCount = 1,
            VmSize = "Standard_D2_v2",
        },
        Identity = new Azure.ContainerService.Inputs.KubernetesClusterIdentityArgs
        {
            Type = "SystemAssigned",
        },
        Tags = 
        {
            { "Environment", "Production" },
        },
    });

    var exampleAssignment = new Azure.Authorization.Assignment("example", new()
    {
        PrincipalId = exampleKubernetesCluster.KubeletIdentity.Apply(kubeletIdentity => kubeletIdentity.ObjectId),
        RoleDefinitionName = "AcrPull",
        Scope = exampleRegistry.Id,
        SkipServicePrincipalAadCheck = true,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.containerservice.Registry;
import com.pulumi.azure.containerservice.RegistryArgs;
import com.pulumi.azure.containerservice.KubernetesCluster;
import com.pulumi.azure.containerservice.KubernetesClusterArgs;
import com.pulumi.azure.containerservice.inputs.KubernetesClusterDefaultNodePoolArgs;
import com.pulumi.azure.containerservice.inputs.KubernetesClusterIdentityArgs;
import com.pulumi.azure.authorization.Assignment;
import com.pulumi.azure.authorization.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example-resources")
            .location("West Europe")
            .build());

        var exampleRegistry = new Registry("exampleRegistry", RegistryArgs.builder()
            .name("containerRegistry1")
            .resourceGroupName(example.name())
            .location(example.location())
            .sku("Premium")
            .build());

        var exampleKubernetesCluster = new KubernetesCluster("exampleKubernetesCluster", KubernetesClusterArgs.builder()
            .name("example-aks1")
            .location(example.location())
            .resourceGroupName(example.name())
            .dnsPrefix("exampleaks1")
            .defaultNodePool(KubernetesClusterDefaultNodePoolArgs.builder()
                .name("default")
                .nodeCount(1)
                .vmSize("Standard_D2_v2")
                .build())
            .identity(KubernetesClusterIdentityArgs.builder()
                .type("SystemAssigned")
                .build())
            .tags(Map.of("Environment", "Production"))
            .build());

        var exampleAssignment = new Assignment("exampleAssignment", AssignmentArgs.builder()
            .principalId(exampleKubernetesCluster.kubeletIdentity().applyValue(kubeletIdentity -> kubeletIdentity.objectId()))
            .roleDefinitionName("AcrPull")
            .scope(exampleRegistry.id())
            .skipServicePrincipalAadCheck(true)
            .build());

    }
}

    resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resources
      location: West Europe
  exampleRegistry:
    type: azure:containerservice:Registry
    name: example
    properties:
      name: containerRegistry1
      resourceGroupName: ${example.name}
      location: ${example.location}
      sku: Premium
  exampleKubernetesCluster:
    type: azure:containerservice:KubernetesCluster
    name: example
    properties:
      name: example-aks1
      location: ${example.location}
      resourceGroupName: ${example.name}
      dnsPrefix: exampleaks1
      defaultNodePool:
        name: default
        nodeCount: 1
        vmSize: Standard_D2_v2
      identity:
        type: SystemAssigned
      tags:
        Environment: Production
  exampleAssignment:
    type: azure:authorization:Assignment
    name: example
    properties:
      principalId: ${exampleKubernetesCluster.kubeletIdentity.objectId}
      roleDefinitionName: AcrPull
      scope: ${exampleRegistry.id}
      skipServicePrincipalAadCheck: true

    Create Registry Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Registry(name: string, args: RegistryArgs, opts?: CustomResourceOptions);
    @overload
def Registry(resource_name: str,
             args: RegistryArgs,
             opts: Optional[ResourceOptions] = None)

@overload
def Registry(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             resource_group_name: Optional[str] = None,
             sku: Optional[str] = None,
             name: Optional[str] = None,
             public_network_access_enabled: Optional[bool] = None,
             export_policy_enabled: Optional[bool] = None,
             georeplications: Optional[Sequence[RegistryGeoreplicationArgs]] = None,
             identity: Optional[RegistryIdentityArgs] = None,
             location: Optional[str] = None,
             admin_enabled: Optional[bool] = None,
             network_rule_bypass_option: Optional[str] = None,
             network_rule_set: Optional[RegistryNetworkRuleSetArgs] = None,
             encryption: Optional[RegistryEncryptionArgs] = None,
             quarantine_policy_enabled: Optional[bool] = None,
             data_endpoint_enabled: Optional[bool] = None,
             retention_policy_in_days: Optional[int] = None,
             anonymous_pull_enabled: Optional[bool] = None,
             tags: Optional[Mapping[str, str]] = None,
             trust_policy_enabled: Optional[bool] = None,
             zone_redundancy_enabled: Optional[bool] = None)
    func NewRegistry(ctx *Context, name string, args RegistryArgs, opts ...ResourceOption) (*Registry, error)
    public Registry(string name, RegistryArgs args, CustomResourceOptions? opts = null)
    public Registry(String name, RegistryArgs args)
public Registry(String name, RegistryArgs args, CustomResourceOptions options)

    type: azure:containerservice:Registry
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var registryResource = new Azure.ContainerService.Registry("registryResource", new()
{
    ResourceGroupName = "string",
    Sku = "string",
    Name = "string",
    PublicNetworkAccessEnabled = false,
    ExportPolicyEnabled = false,
    Georeplications = new[]
    {
        new Azure.ContainerService.Inputs.RegistryGeoreplicationArgs
        {
            Location = "string",
            RegionalEndpointEnabled = false,
            Tags = 
            {
                { "string", "string" },
            },
            ZoneRedundancyEnabled = false,
        },
    },
    Identity = new Azure.ContainerService.Inputs.RegistryIdentityArgs
    {
        Type = "string",
        IdentityIds = new[]
        {
            "string",
        },
        PrincipalId = "string",
        TenantId = "string",
    },
    Location = "string",
    AdminEnabled = false,
    NetworkRuleBypassOption = "string",
    NetworkRuleSet = new Azure.ContainerService.Inputs.RegistryNetworkRuleSetArgs
    {
        DefaultAction = "string",
        IpRules = new[]
        {
            new Azure.ContainerService.Inputs.RegistryNetworkRuleSetIpRuleArgs
            {
                Action = "string",
                IpRange = "string",
            },
        },
    },
    Encryption = new Azure.ContainerService.Inputs.RegistryEncryptionArgs
    {
        IdentityClientId = "string",
        KeyVaultKeyId = "string",
    },
    QuarantinePolicyEnabled = false,
    DataEndpointEnabled = false,
    RetentionPolicyInDays = 0,
    AnonymousPullEnabled = false,
    Tags = 
    {
        { "string", "string" },
    },
    TrustPolicyEnabled = false,
    ZoneRedundancyEnabled = false,
});

    example, err := containerservice.NewRegistry(ctx, "registryResource", &containerservice.RegistryArgs{
	ResourceGroupName:          pulumi.String("string"),
	Sku:                        pulumi.String("string"),
	Name:                       pulumi.String("string"),
	PublicNetworkAccessEnabled: pulumi.Bool(false),
	ExportPolicyEnabled:        pulumi.Bool(false),
	Georeplications: containerservice.RegistryGeoreplicationArray{
		&containerservice.RegistryGeoreplicationArgs{
			Location:                pulumi.String("string"),
			RegionalEndpointEnabled: pulumi.Bool(false),
			Tags: pulumi.StringMap{
				"string": pulumi.String("string"),
			},
			ZoneRedundancyEnabled: pulumi.Bool(false),
		},
	},
	Identity: &containerservice.RegistryIdentityArgs{
		Type: pulumi.String("string"),
		IdentityIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		PrincipalId: pulumi.String("string"),
		TenantId:    pulumi.String("string"),
	},
	Location:                pulumi.String("string"),
	AdminEnabled:            pulumi.Bool(false),
	NetworkRuleBypassOption: pulumi.String("string"),
	NetworkRuleSet: &containerservice.RegistryNetworkRuleSetArgs{
		DefaultAction: pulumi.String("string"),
		IpRules: containerservice.RegistryNetworkRuleSetIpRuleArray{
			&containerservice.RegistryNetworkRuleSetIpRuleArgs{
				Action:  pulumi.String("string"),
				IpRange: pulumi.String("string"),
			},
		},
	},
	Encryption: &containerservice.RegistryEncryptionArgs{
		IdentityClientId: pulumi.String("string"),
		KeyVaultKeyId:    pulumi.String("string"),
	},
	QuarantinePolicyEnabled: pulumi.Bool(false),
	DataEndpointEnabled:     pulumi.Bool(false),
	RetentionPolicyInDays:   pulumi.Int(0),
	AnonymousPullEnabled:    pulumi.Bool(false),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	TrustPolicyEnabled:    pulumi.Bool(false),
	ZoneRedundancyEnabled: pulumi.Bool(false),
})

    var registryResource = new Registry("registryResource", RegistryArgs.builder()
    .resourceGroupName("string")
    .sku("string")
    .name("string")
    .publicNetworkAccessEnabled(false)
    .exportPolicyEnabled(false)
    .georeplications(RegistryGeoreplicationArgs.builder()
        .location("string")
        .regionalEndpointEnabled(false)
        .tags(Map.of("string", "string"))
        .zoneRedundancyEnabled(false)
        .build())
    .identity(RegistryIdentityArgs.builder()
        .type("string")
        .identityIds("string")
        .principalId("string")
        .tenantId("string")
        .build())
    .location("string")
    .adminEnabled(false)
    .networkRuleBypassOption("string")
    .networkRuleSet(RegistryNetworkRuleSetArgs.builder()
        .defaultAction("string")
        .ipRules(RegistryNetworkRuleSetIpRuleArgs.builder()
            .action("string")
            .ipRange("string")
            .build())
        .build())
    .encryption(RegistryEncryptionArgs.builder()
        .identityClientId("string")
        .keyVaultKeyId("string")
        .build())
    .quarantinePolicyEnabled(false)
    .dataEndpointEnabled(false)
    .retentionPolicyInDays(0)
    .anonymousPullEnabled(false)
    .tags(Map.of("string", "string"))
    .trustPolicyEnabled(false)
    .zoneRedundancyEnabled(false)
    .build());

    registry_resource = azure.containerservice.Registry("registryResource",
    resource_group_name="string",
    sku="string",
    name="string",
    public_network_access_enabled=False,
    export_policy_enabled=False,
    georeplications=[{
        "location": "string",
        "regional_endpoint_enabled": False,
        "tags": {
            "string": "string",
        },
        "zone_redundancy_enabled": False,
    }],
    identity={
        "type": "string",
        "identity_ids": ["string"],
        "principal_id": "string",
        "tenant_id": "string",
    },
    location="string",
    admin_enabled=False,
    network_rule_bypass_option="string",
    network_rule_set={
        "default_action": "string",
        "ip_rules": [{
            "action": "string",
            "ip_range": "string",
        }],
    },
    encryption={
        "identity_client_id": "string",
        "key_vault_key_id": "string",
    },
    quarantine_policy_enabled=False,
    data_endpoint_enabled=False,
    retention_policy_in_days=0,
    anonymous_pull_enabled=False,
    tags={
        "string": "string",
    },
    trust_policy_enabled=False,
    zone_redundancy_enabled=False)

    const registryResource = new azure.containerservice.Registry("registryResource", {
    resourceGroupName: "string",
    sku: "string",
    name: "string",
    publicNetworkAccessEnabled: false,
    exportPolicyEnabled: false,
    georeplications: [{
        location: "string",
        regionalEndpointEnabled: false,
        tags: {
            string: "string",
        },
        zoneRedundancyEnabled: false,
    }],
    identity: {
        type: "string",
        identityIds: ["string"],
        principalId: "string",
        tenantId: "string",
    },
    location: "string",
    adminEnabled: false,
    networkRuleBypassOption: "string",
    networkRuleSet: {
        defaultAction: "string",
        ipRules: [{
            action: "string",
            ipRange: "string",
        }],
    },
    encryption: {
        identityClientId: "string",
        keyVaultKeyId: "string",
    },
    quarantinePolicyEnabled: false,
    dataEndpointEnabled: false,
    retentionPolicyInDays: 0,
    anonymousPullEnabled: false,
    tags: {
        string: "string",
    },
    trustPolicyEnabled: false,
    zoneRedundancyEnabled: false,
});

    type: azure:containerservice:Registry
properties:
    adminEnabled: false
    anonymousPullEnabled: false
    dataEndpointEnabled: false
    encryption:
        identityClientId: string
        keyVaultKeyId: string
    exportPolicyEnabled: false
    georeplications:
        - location: string
          regionalEndpointEnabled: false
          tags:
            string: string
          zoneRedundancyEnabled: false
    identity:
        identityIds:
            - string
        principalId: string
        tenantId: string
        type: string
    location: string
    name: string
    networkRuleBypassOption: string
    networkRuleSet:
        defaultAction: string
        ipRules:
            - action: string
              ipRange: string
    publicNetworkAccessEnabled: false
    quarantinePolicyEnabled: false
    resourceGroupName: string
    retentionPolicyInDays: 0
    sku: string
    tags:
        string: string
    trustPolicyEnabled: false
    zoneRedundancyEnabled: false

    Registry Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Registry resource accepts the following input properties:

    ResourceGroupName string
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    Sku string
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    AdminEnabled bool
    Specifies whether the admin user is enabled. Defaults to false.
    AnonymousPullEnabled bool
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    DataEndpointEnabled bool
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    Encryption RegistryEncryption
    An encryption block as documented below.
    ExportPolicyEnabled bool

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    Georeplications List<RegistryGeoreplication>

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    Identity RegistryIdentity
    An identity block as defined below.
    Location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    Name string
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    NetworkRuleBypassOption string
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    NetworkRuleSet RegistryNetworkRuleSet
    A network_rule_set block as documented below.
    PublicNetworkAccessEnabled bool
    Whether public network access is allowed for the container registry. Defaults to true.
    QuarantinePolicyEnabled bool
    Boolean value that indicates whether quarantine policy is enabled.
    RetentionPolicyInDays int
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    Tags Dictionary<string, string>
    A mapping of tags to assign to the resource.
    TrustPolicyEnabled bool
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    ZoneRedundancyEnabled bool
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    ResourceGroupName string
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    Sku string
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    AdminEnabled bool
    Specifies whether the admin user is enabled. Defaults to false.
    AnonymousPullEnabled bool
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    DataEndpointEnabled bool
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    Encryption RegistryEncryptionArgs
    An encryption block as documented below.
    ExportPolicyEnabled bool

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    Georeplications []RegistryGeoreplicationArgs

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    Identity RegistryIdentityArgs
    An identity block as defined below.
    Location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    Name string
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    NetworkRuleBypassOption string
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    NetworkRuleSet RegistryNetworkRuleSetArgs
    A network_rule_set block as documented below.
    PublicNetworkAccessEnabled bool
    Whether public network access is allowed for the container registry. Defaults to true.
    QuarantinePolicyEnabled bool
    Boolean value that indicates whether quarantine policy is enabled.
    RetentionPolicyInDays int
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    Tags map[string]string
    A mapping of tags to assign to the resource.
    TrustPolicyEnabled bool
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    ZoneRedundancyEnabled bool
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    resourceGroupName String
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    sku String
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    adminEnabled Boolean
    Specifies whether the admin user is enabled. Defaults to false.
    anonymousPullEnabled Boolean
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    dataEndpointEnabled Boolean
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    encryption RegistryEncryption
    An encryption block as documented below.
    exportPolicyEnabled Boolean

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    georeplications List<RegistryGeoreplication>

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    identity RegistryIdentity
    An identity block as defined below.
    location String
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    name String
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    networkRuleBypassOption String
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    networkRuleSet RegistryNetworkRuleSet
    A network_rule_set block as documented below.
    publicNetworkAccessEnabled Boolean
    Whether public network access is allowed for the container registry. Defaults to true.
    quarantinePolicyEnabled Boolean
    Boolean value that indicates whether quarantine policy is enabled.
    retentionPolicyInDays Integer
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    tags Map<String,String>
    A mapping of tags to assign to the resource.
    trustPolicyEnabled Boolean
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    zoneRedundancyEnabled Boolean
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    resourceGroupName string
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    sku string
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    adminEnabled boolean
    Specifies whether the admin user is enabled. Defaults to false.
    anonymousPullEnabled boolean
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    dataEndpointEnabled boolean
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    encryption RegistryEncryption
    An encryption block as documented below.
    exportPolicyEnabled boolean

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    georeplications RegistryGeoreplication[]

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    identity RegistryIdentity
    An identity block as defined below.
    location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    name string
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    networkRuleBypassOption string
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    networkRuleSet RegistryNetworkRuleSet
    A network_rule_set block as documented below.
    publicNetworkAccessEnabled boolean
    Whether public network access is allowed for the container registry. Defaults to true.
    quarantinePolicyEnabled boolean
    Boolean value that indicates whether quarantine policy is enabled.
    retentionPolicyInDays number
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    tags {[key: string]: string}
    A mapping of tags to assign to the resource.
    trustPolicyEnabled boolean
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    zoneRedundancyEnabled boolean
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    resource_group_name str
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    sku str
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    admin_enabled bool
    Specifies whether the admin user is enabled. Defaults to false.
    anonymous_pull_enabled bool
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    data_endpoint_enabled bool
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    encryption RegistryEncryptionArgs
    An encryption block as documented below.
    export_policy_enabled bool

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    georeplications Sequence[RegistryGeoreplicationArgs]

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    identity RegistryIdentityArgs
    An identity block as defined below.
    location str
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    name str
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    network_rule_bypass_option str
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    network_rule_set RegistryNetworkRuleSetArgs
    A network_rule_set block as documented below.
    public_network_access_enabled bool
    Whether public network access is allowed for the container registry. Defaults to true.
    quarantine_policy_enabled bool
    Boolean value that indicates whether quarantine policy is enabled.
    retention_policy_in_days int
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    tags Mapping[str, str]
    A mapping of tags to assign to the resource.
    trust_policy_enabled bool
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    zone_redundancy_enabled bool
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    resourceGroupName String
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    sku String
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    adminEnabled Boolean
    Specifies whether the admin user is enabled. Defaults to false.
    anonymousPullEnabled Boolean
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    dataEndpointEnabled Boolean
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    encryption Property Map
    An encryption block as documented below.
    exportPolicyEnabled Boolean

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    georeplications List<Property Map>

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    identity Property Map
    An identity block as defined below.
    location String
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    name String
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    networkRuleBypassOption String
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    networkRuleSet Property Map
    A network_rule_set block as documented below.
    publicNetworkAccessEnabled Boolean
    Whether public network access is allowed for the container registry. Defaults to true.
    quarantinePolicyEnabled Boolean
    Boolean value that indicates whether quarantine policy is enabled.
    retentionPolicyInDays Number
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    tags Map<String>
    A mapping of tags to assign to the resource.
    trustPolicyEnabled Boolean
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    zoneRedundancyEnabled Boolean
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Registry resource produces the following output properties:

    AdminPassword string
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    AdminUsername string
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    Id string
    The provider-assigned unique ID for this managed resource.
    LoginServer string
    The URL that can be used to log into the container registry.
    AdminPassword string
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    AdminUsername string
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    Id string
    The provider-assigned unique ID for this managed resource.
    LoginServer string
    The URL that can be used to log into the container registry.
    adminPassword String
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    adminUsername String
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    id String
    The provider-assigned unique ID for this managed resource.
    loginServer String
    The URL that can be used to log into the container registry.
    adminPassword string
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    adminUsername string
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    id string
    The provider-assigned unique ID for this managed resource.
    loginServer string
    The URL that can be used to log into the container registry.
    admin_password str
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    admin_username str
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    id str
    The provider-assigned unique ID for this managed resource.
    login_server str
    The URL that can be used to log into the container registry.
    adminPassword String
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    adminUsername String
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    id String
    The provider-assigned unique ID for this managed resource.
    loginServer String
    The URL that can be used to log into the container registry.

    Look up Existing Registry Resource

    Get an existing Registry resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: RegistryState, opts?: CustomResourceOptions): Registry
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        admin_enabled: Optional[bool] = None,
        admin_password: Optional[str] = None,
        admin_username: Optional[str] = None,
        anonymous_pull_enabled: Optional[bool] = None,
        data_endpoint_enabled: Optional[bool] = None,
        encryption: Optional[RegistryEncryptionArgs] = None,
        export_policy_enabled: Optional[bool] = None,
        georeplications: Optional[Sequence[RegistryGeoreplicationArgs]] = None,
        identity: Optional[RegistryIdentityArgs] = None,
        location: Optional[str] = None,
        login_server: Optional[str] = None,
        name: Optional[str] = None,
        network_rule_bypass_option: Optional[str] = None,
        network_rule_set: Optional[RegistryNetworkRuleSetArgs] = None,
        public_network_access_enabled: Optional[bool] = None,
        quarantine_policy_enabled: Optional[bool] = None,
        resource_group_name: Optional[str] = None,
        retention_policy_in_days: Optional[int] = None,
        sku: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        trust_policy_enabled: Optional[bool] = None,
        zone_redundancy_enabled: Optional[bool] = None) -> Registry
    func GetRegistry(ctx *Context, name string, id IDInput, state *RegistryState, opts ...ResourceOption) (*Registry, error)
    public static Registry Get(string name, Input<string> id, RegistryState? state, CustomResourceOptions? opts = null)
    public static Registry get(String name, Output<String> id, RegistryState state, CustomResourceOptions options)
    resources:  _:    type: azure:containerservice:Registry    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AdminEnabled bool
    Specifies whether the admin user is enabled. Defaults to false.
    AdminPassword string
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    AdminUsername string
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    AnonymousPullEnabled bool
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    DataEndpointEnabled bool
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    Encryption RegistryEncryption
    An encryption block as documented below.
    ExportPolicyEnabled bool

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    Georeplications List<RegistryGeoreplication>

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    Identity RegistryIdentity
    An identity block as defined below.
    Location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    LoginServer string
    The URL that can be used to log into the container registry.
    Name string
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    NetworkRuleBypassOption string
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    NetworkRuleSet RegistryNetworkRuleSet
    A network_rule_set block as documented below.
    PublicNetworkAccessEnabled bool
    Whether public network access is allowed for the container registry. Defaults to true.
    QuarantinePolicyEnabled bool
    Boolean value that indicates whether quarantine policy is enabled.
    ResourceGroupName string
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    RetentionPolicyInDays int
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    Sku string
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    Tags Dictionary<string, string>
    A mapping of tags to assign to the resource.
    TrustPolicyEnabled bool
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    ZoneRedundancyEnabled bool
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    AdminEnabled bool
    Specifies whether the admin user is enabled. Defaults to false.
    AdminPassword string
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    AdminUsername string
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    AnonymousPullEnabled bool
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    DataEndpointEnabled bool
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    Encryption RegistryEncryptionArgs
    An encryption block as documented below.
    ExportPolicyEnabled bool

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    Georeplications []RegistryGeoreplicationArgs

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    Identity RegistryIdentityArgs
    An identity block as defined below.
    Location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    LoginServer string
    The URL that can be used to log into the container registry.
    Name string
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    NetworkRuleBypassOption string
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    NetworkRuleSet RegistryNetworkRuleSetArgs
    A network_rule_set block as documented below.
    PublicNetworkAccessEnabled bool
    Whether public network access is allowed for the container registry. Defaults to true.
    QuarantinePolicyEnabled bool
    Boolean value that indicates whether quarantine policy is enabled.
    ResourceGroupName string
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    RetentionPolicyInDays int
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    Sku string
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    Tags map[string]string
    A mapping of tags to assign to the resource.
    TrustPolicyEnabled bool
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    ZoneRedundancyEnabled bool
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    adminEnabled Boolean
    Specifies whether the admin user is enabled. Defaults to false.
    adminPassword String
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    adminUsername String
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    anonymousPullEnabled Boolean
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    dataEndpointEnabled Boolean
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    encryption RegistryEncryption
    An encryption block as documented below.
    exportPolicyEnabled Boolean

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    georeplications List<RegistryGeoreplication>

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    identity RegistryIdentity
    An identity block as defined below.
    location String
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    loginServer String
    The URL that can be used to log into the container registry.
    name String
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    networkRuleBypassOption String
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    networkRuleSet RegistryNetworkRuleSet
    A network_rule_set block as documented below.
    publicNetworkAccessEnabled Boolean
    Whether public network access is allowed for the container registry. Defaults to true.
    quarantinePolicyEnabled Boolean
    Boolean value that indicates whether quarantine policy is enabled.
    resourceGroupName String
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    retentionPolicyInDays Integer
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    sku String
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    tags Map<String,String>
    A mapping of tags to assign to the resource.
    trustPolicyEnabled Boolean
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    zoneRedundancyEnabled Boolean
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    adminEnabled boolean
    Specifies whether the admin user is enabled. Defaults to false.
    adminPassword string
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    adminUsername string
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    anonymousPullEnabled boolean
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    dataEndpointEnabled boolean
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    encryption RegistryEncryption
    An encryption block as documented below.
    exportPolicyEnabled boolean

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    georeplications RegistryGeoreplication[]

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    identity RegistryIdentity
    An identity block as defined below.
    location string
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    loginServer string
    The URL that can be used to log into the container registry.
    name string
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    networkRuleBypassOption string
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    networkRuleSet RegistryNetworkRuleSet
    A network_rule_set block as documented below.
    publicNetworkAccessEnabled boolean
    Whether public network access is allowed for the container registry. Defaults to true.
    quarantinePolicyEnabled boolean
    Boolean value that indicates whether quarantine policy is enabled.
    resourceGroupName string
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    retentionPolicyInDays number
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    sku string
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    tags {[key: string]: string}
    A mapping of tags to assign to the resource.
    trustPolicyEnabled boolean
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    zoneRedundancyEnabled boolean
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    admin_enabled bool
    Specifies whether the admin user is enabled. Defaults to false.
    admin_password str
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    admin_username str
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    anonymous_pull_enabled bool
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    data_endpoint_enabled bool
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    encryption RegistryEncryptionArgs
    An encryption block as documented below.
    export_policy_enabled bool

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    georeplications Sequence[RegistryGeoreplicationArgs]

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    identity RegistryIdentityArgs
    An identity block as defined below.
    location str
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    login_server str
    The URL that can be used to log into the container registry.
    name str
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    network_rule_bypass_option str
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    network_rule_set RegistryNetworkRuleSetArgs
    A network_rule_set block as documented below.
    public_network_access_enabled bool
    Whether public network access is allowed for the container registry. Defaults to true.
    quarantine_policy_enabled bool
    Boolean value that indicates whether quarantine policy is enabled.
    resource_group_name str
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    retention_policy_in_days int
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    sku str
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    tags Mapping[str, str]
    A mapping of tags to assign to the resource.
    trust_policy_enabled bool
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    zone_redundancy_enabled bool
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.
    adminEnabled Boolean
    Specifies whether the admin user is enabled. Defaults to false.
    adminPassword String
    The Password associated with the Container Registry Admin account - if the admin account is enabled.
    adminUsername String
    The Username associated with the Container Registry Admin account - if the admin account is enabled.
    anonymousPullEnabled Boolean
    Whether allows anonymous (unauthenticated) pull access to this Container Registry? This is only supported on resources with the Standard or Premium SKU.
    dataEndpointEnabled Boolean
    Whether to enable dedicated data endpoints for this Container Registry? This is only supported on resources with the Premium SKU.
    encryption Property Map
    An encryption block as documented below.
    exportPolicyEnabled Boolean

    Boolean value that indicates whether export policy is enabled. Defaults to true. In order to set it to false, make sure the public_network_access_enabled is also set to false.

    NOTE: quarantine_policy_enabled, retention_policy_in_days, trust_policy_enabled, export_policy_enabled and zone_redundancy_enabled are only supported on resources with the Premium SKU.

    georeplications List<Property Map>

    One or more georeplications blocks as documented below.

    NOTE: The georeplications is only supported on new resources with the Premium SKU.

    NOTE: The georeplications list cannot contain the location where the Container Registry exists.

    NOTE: If more than one georeplications block is specified, they are expected to follow the alphabetic order on the location property.

    identity Property Map
    An identity block as defined below.
    location String
    Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
    loginServer String
    The URL that can be used to log into the container registry.
    name String
    Specifies the name of the Container Registry. Only Alphanumeric characters allowed. Changing this forces a new resource to be created.
    networkRuleBypassOption String
    Whether to allow trusted Azure services to access a network restricted Container Registry? Possible values are None and AzureServices. Defaults to AzureServices.
    networkRuleSet Property Map
    A network_rule_set block as documented below.
    publicNetworkAccessEnabled Boolean
    Whether public network access is allowed for the container registry. Defaults to true.
    quarantinePolicyEnabled Boolean
    Boolean value that indicates whether quarantine policy is enabled.
    resourceGroupName String
    The name of the resource group in which to create the Container Registry. Changing this forces a new resource to be created.
    retentionPolicyInDays Number
    The number of days to retain and untagged manifest after which it gets purged. Defaults to 7.
    sku String
    The SKU name of the container registry. Possible values are Basic, Standard and Premium.
    tags Map<String>
    A mapping of tags to assign to the resource.
    trustPolicyEnabled Boolean
    Boolean value that indicated whether trust policy is enabled. Defaults to false.
    zoneRedundancyEnabled Boolean
    Whether zone redundancy is enabled for this Container Registry? Changing this forces a new resource to be created. Defaults to false.

    Supporting Types

    RegistryEncryption, RegistryEncryptionArgs

    IdentityClientId string
    The client ID of the managed identity associated with the encryption key.
    KeyVaultKeyId string
    The ID of the Key Vault Key.
    IdentityClientId string
    The client ID of the managed identity associated with the encryption key.
    KeyVaultKeyId string
    The ID of the Key Vault Key.
    identityClientId String
    The client ID of the managed identity associated with the encryption key.
    keyVaultKeyId String
    The ID of the Key Vault Key.
    identityClientId string
    The client ID of the managed identity associated with the encryption key.
    keyVaultKeyId string
    The ID of the Key Vault Key.
    identity_client_id str
    The client ID of the managed identity associated with the encryption key.
    key_vault_key_id str
    The ID of the Key Vault Key.
    identityClientId String
    The client ID of the managed identity associated with the encryption key.
    keyVaultKeyId String
    The ID of the Key Vault Key.

    RegistryGeoreplication, RegistryGeoreplicationArgs

    Location string
    A location where the container registry should be geo-replicated.
    RegionalEndpointEnabled bool
    Whether regional endpoint is enabled for this Container Registry?
    Tags Dictionary<string, string>
    A mapping of tags to assign to this replication location.
    ZoneRedundancyEnabled bool

    Whether zone redundancy is enabled for this replication location? Defaults to false.

    NOTE: Changing the zone_redundancy_enabled forces the a underlying replication to be created.

    Location string
    A location where the container registry should be geo-replicated.
    RegionalEndpointEnabled bool
    Whether regional endpoint is enabled for this Container Registry?
    Tags map[string]string
    A mapping of tags to assign to this replication location.
    ZoneRedundancyEnabled bool

    Whether zone redundancy is enabled for this replication location? Defaults to false.

    NOTE: Changing the zone_redundancy_enabled forces the a underlying replication to be created.

    location String
    A location where the container registry should be geo-replicated.
    regionalEndpointEnabled Boolean
    Whether regional endpoint is enabled for this Container Registry?
    tags Map<String,String>
    A mapping of tags to assign to this replication location.
    zoneRedundancyEnabled Boolean

    Whether zone redundancy is enabled for this replication location? Defaults to false.

    NOTE: Changing the zone_redundancy_enabled forces the a underlying replication to be created.

    location string
    A location where the container registry should be geo-replicated.
    regionalEndpointEnabled boolean
    Whether regional endpoint is enabled for this Container Registry?
    tags {[key: string]: string}
    A mapping of tags to assign to this replication location.
    zoneRedundancyEnabled boolean

    Whether zone redundancy is enabled for this replication location? Defaults to false.

    NOTE: Changing the zone_redundancy_enabled forces the a underlying replication to be created.

    location str
    A location where the container registry should be geo-replicated.
    regional_endpoint_enabled bool
    Whether regional endpoint is enabled for this Container Registry?
    tags Mapping[str, str]
    A mapping of tags to assign to this replication location.
    zone_redundancy_enabled bool

    Whether zone redundancy is enabled for this replication location? Defaults to false.

    NOTE: Changing the zone_redundancy_enabled forces the a underlying replication to be created.

    location String
    A location where the container registry should be geo-replicated.
    regionalEndpointEnabled Boolean
    Whether regional endpoint is enabled for this Container Registry?
    tags Map<String>
    A mapping of tags to assign to this replication location.
    zoneRedundancyEnabled Boolean

    Whether zone redundancy is enabled for this replication location? Defaults to false.

    NOTE: Changing the zone_redundancy_enabled forces the a underlying replication to be created.

    RegistryIdentity, RegistryIdentityArgs

    Type string
    Specifies the type of Managed Service Identity that should be configured on this Container Registry. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    IdentityIds List<string>

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Registry.

    NOTE: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    PrincipalId string
    The Principal ID associated with this Managed Service Identity.
    TenantId string
    The Tenant ID associated with this Managed Service Identity.
    Type string
    Specifies the type of Managed Service Identity that should be configured on this Container Registry. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    IdentityIds []string

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Registry.

    NOTE: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    PrincipalId string
    The Principal ID associated with this Managed Service Identity.
    TenantId string
    The Tenant ID associated with this Managed Service Identity.
    type String
    Specifies the type of Managed Service Identity that should be configured on this Container Registry. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    identityIds List<String>

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Registry.

    NOTE: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    principalId String
    The Principal ID associated with this Managed Service Identity.
    tenantId String
    The Tenant ID associated with this Managed Service Identity.
    type string
    Specifies the type of Managed Service Identity that should be configured on this Container Registry. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    identityIds string[]

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Registry.

    NOTE: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    principalId string
    The Principal ID associated with this Managed Service Identity.
    tenantId string
    The Tenant ID associated with this Managed Service Identity.
    type str
    Specifies the type of Managed Service Identity that should be configured on this Container Registry. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    identity_ids Sequence[str]

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Registry.

    NOTE: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    principal_id str
    The Principal ID associated with this Managed Service Identity.
    tenant_id str
    The Tenant ID associated with this Managed Service Identity.
    type String
    Specifies the type of Managed Service Identity that should be configured on this Container Registry. Possible values are SystemAssigned, UserAssigned, SystemAssigned, UserAssigned (to enable both).
    identityIds List<String>

    Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Registry.

    NOTE: This is required when type is set to UserAssigned or SystemAssigned, UserAssigned.

    principalId String
    The Principal ID associated with this Managed Service Identity.
    tenantId String
    The Tenant ID associated with this Managed Service Identity.

    RegistryNetworkRuleSet, RegistryNetworkRuleSetArgs

    DefaultAction string
    The behaviour for requests matching no rules. Either Allow or Deny. Defaults to Allow
    IpRules List<RegistryNetworkRuleSetIpRule>

    One or more ip_rule blocks as defined below.

    NOTE: network_rule_set is only supported with the Premium SKU at this time.

    NOTE: Azure automatically configures Network Rules - to remove these you'll need to specify an network_rule_set block with default_action set to Deny.

    DefaultAction string
    The behaviour for requests matching no rules. Either Allow or Deny. Defaults to Allow
    IpRules []RegistryNetworkRuleSetIpRule

    One or more ip_rule blocks as defined below.

    NOTE: network_rule_set is only supported with the Premium SKU at this time.

    NOTE: Azure automatically configures Network Rules - to remove these you'll need to specify an network_rule_set block with default_action set to Deny.

    defaultAction String
    The behaviour for requests matching no rules. Either Allow or Deny. Defaults to Allow
    ipRules List<RegistryNetworkRuleSetIpRule>

    One or more ip_rule blocks as defined below.

    NOTE: network_rule_set is only supported with the Premium SKU at this time.

    NOTE: Azure automatically configures Network Rules - to remove these you'll need to specify an network_rule_set block with default_action set to Deny.

    defaultAction string
    The behaviour for requests matching no rules. Either Allow or Deny. Defaults to Allow
    ipRules RegistryNetworkRuleSetIpRule[]

    One or more ip_rule blocks as defined below.

    NOTE: network_rule_set is only supported with the Premium SKU at this time.

    NOTE: Azure automatically configures Network Rules - to remove these you'll need to specify an network_rule_set block with default_action set to Deny.

    default_action str
    The behaviour for requests matching no rules. Either Allow or Deny. Defaults to Allow
    ip_rules Sequence[RegistryNetworkRuleSetIpRule]

    One or more ip_rule blocks as defined below.

    NOTE: network_rule_set is only supported with the Premium SKU at this time.

    NOTE: Azure automatically configures Network Rules - to remove these you'll need to specify an network_rule_set block with default_action set to Deny.

    defaultAction String
    The behaviour for requests matching no rules. Either Allow or Deny. Defaults to Allow
    ipRules List<Property Map>

    One or more ip_rule blocks as defined below.

    NOTE: network_rule_set is only supported with the Premium SKU at this time.

    NOTE: Azure automatically configures Network Rules - to remove these you'll need to specify an network_rule_set block with default_action set to Deny.

    RegistryNetworkRuleSetIpRule, RegistryNetworkRuleSetIpRuleArgs

    Action string
    The behaviour for requests matching this rule. At this time the only supported value is Allow
    IpRange string
    The CIDR block from which requests will match the rule.
    Action string
    The behaviour for requests matching this rule. At this time the only supported value is Allow
    IpRange string
    The CIDR block from which requests will match the rule.
    action String
    The behaviour for requests matching this rule. At this time the only supported value is Allow
    ipRange String
    The CIDR block from which requests will match the rule.
    action string
    The behaviour for requests matching this rule. At this time the only supported value is Allow
    ipRange string
    The CIDR block from which requests will match the rule.
    action str
    The behaviour for requests matching this rule. At this time the only supported value is Allow
    ip_range str
    The CIDR block from which requests will match the rule.
    action String
    The behaviour for requests matching this rule. At this time the only supported value is Allow
    ipRange String
    The CIDR block from which requests will match the rule.

    Import

    Container Registries can be imported using the resource id, e.g.

    $ pulumi import azure:containerservice/registry:Registry example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.ContainerRegistry/registries/myregistry1

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azurerm Terraform Provider.
    azure logo

    We recommend using Azure Native.

    Azure v6.21.0 published on Friday, Mar 7, 2025 by Pulumi
    pulumi/pulumi-azure