Exercise - Deploy images from Azure Container Registry

Completed 100 XP

You can pull container images from Azure Container Registry using various container management platforms, such as Azure Container Instances, Azure Kubernetes Service, or Docker for Windows or Mac. In this module, you deploy the image to an Azure Container Instance.

Registry authentication

Azure Container Registry doesn't support unauthenticated access and requires authentication for all operations. Registries support two types of identities:

• Microsoft Entra identities, including both user and service principals. Access to a registry with a Microsoft Entra identity is role-based, and you can assign identities one of three roles: reader (pull access only), contributor (push and pull access), or owner (pull, push, and assign roles to other users).
• The admin account included with each registry. The admin account is disabled by default.

Important

The admin account provides a quick option to try a new registry. You can enable the account and use the username and password in workflows and apps that need access. After you've confirmed the registry works as expected, you should disable the admin account and use Microsoft Entra identities to ensure the security of your registry. Don't share the admin account credentials with others.

Enable the registry admin account

1. Enable the admin account on your registry using the az acr update command.

   Azure CLI

   az acr update -n $ACR_NAME --admin-enabled true
   

2. Retrieve the username and password for the admin account using the az acr credential show command.

   Azure CLI

   az acr credential show --name $ACR_NAME
   

3. Take note of the username and password values in the output for use in future commands.

Deploy a container with Azure CLI

1. Deploy a container instance using the az container create command. Make sure you replace <admin-username> and <admin-password> with your admin username and password from the previous command.

   Azure CLI

   az container create --resource-group learn-acr-rg --name acr-tasks --image $ACR_NAME.azurecr.io/helloacrtasks:v1 --registry-login-server $ACR_NAME.azurecr.io --ip-address Public --location eastus --registry-username <admin-username> --registry-password <admin-password>
   

2. Get the IP address of the Azure container instance using the az container show command.

   Azure CLI

   az container show --resource-group learn-acr-rg --name acr-tasks --query ipAddress.ip --output table
   

3. In a separate browser tab, navigate to the IP address of the container. If everything is configured correctly, you should see the following web page:

   

---

Next unit: Exercise - Replicate a container image to different Azure regions

Previous Next

Having an issue? We can help!

• For issues related to this module, explore existing questions using the #azure training tag or Ask a question on Microsoft Q&A.
• For issues related to Certifications and Exams, post on Certifications Support Forums or visit our Credentials Help.