Azure Container Registry

azurerm_container_registry (Terraform)

The Registry in Container can be configured in Terraform with the resource name azurerm_container_registry. The following sections describe 10 examples of how to use the resource and its parameters.

Example Usage from GitHub

gilyas/infracost

resource "azurerm_container_registry" "my_registry" {
  name                     = "containerRegistry1"
  resource_group_name      = azurerm_resource_group.rg.name
  location                 = azurerm_resource_group.rg.location
  sku                      = "Premium"
  admin_enabled            = false

infracost/infracost

resource "azurerm_container_registry" "my_registry" {
  name                     = "containerRegistry1"
  resource_group_name      = azurerm_resource_group.rg.name
  location                 = azurerm_resource_group.rg.location
  sku                      = "Premium"
  admin_enabled            = false

DanielMabbett/terraform-azurerm-container-registry

resource "azurerm_container_registry" "registry" {
  count                    = var.georeplication_locations == [] ? 1 : 0

  name                     = var.name
  resource_group_name      = azurerm_resource_group.group.name
  location                 = azurerm_resource_group.group.location

hyonsok5/terraform-lunch2

resource "azurerm_container_registry" "acr_dev_ablunch2_aztech_kc" {
  name                     = "acrdevablunch2aztechkc"
  resource_group_name      = data.azurerm_resource_group.rg_dev_lunch2_aztech_kc.name
  location                 = var.location
  sku                      = "Standard"
  admin_enabled            = true

wuestkamp/scalable-microservice-demo

resource "azurerm_container_registry" "acr" {
  name                = "containerRregistryScalableMicroservice"
  resource_group_name = azurerm_resource_group.scalable_microservice.name
  location            = azurerm_resource_group.scalable_microservice.location
  sku                 = "standard"
}

pleasereleaseme/megastore-az

resource "azurerm_container_registry" "acr" {
  name                = join("", [var.project_name, "acr"])
  resource_group_name = azurerm_resource_group.rg.name
  location            = azurerm_resource_group.rg.location
  sku                 = "Basic"
  admin_enabled       = true

phcaguiar/aks

resource "azurerm_container_registry" "acr" {
  name                     = var.container_registry_name
  resource_group_name      = var.product_resource_group_name
  location                 = var.location
  sku                      = var.container_registry_sku

delphai/infrastructure-old

resource "azurerm_container_registry" "main" {
  location            = var.az_location
  name                = replace(local.delphai_name, "-", "")
  resource_group_name = azurerm_resource_group.main.name
  admin_enabled       = true
  sku                 = "Premium"

fortunkam/aks-public-cluster

resource "azurerm_container_registry" "acr" {
  name                = local.acr_name
  resource_group_name = azurerm_resource_group.spoke.name
  location            = azurerm_resource_group.spoke.location
  sku                 = "Premium"
  admin_enabled       = false

KamenYovchev/terraform-azurerm-container-registry

resource "azurerm_container_registry" "acr" {
  name                     = var.name
  resource_group_name      = var.resource_group_name
  location                 = var.location
  sku                      = var.sku
  admin_enabled            = var.admin_enabled

Parameters

• admin_enabled optional - bool
• admin_password optional computed - string
• admin_username optional computed - string
• georeplication_locations optional - set of string
• id optional computed - string
• location required - string
• login_server optional computed - string
• name required - string
• network_rule_set optional computed - list of object
  • default_action - string
  • ip_rule - set of object
    • action - string
    • ip_range - string
  • virtual_network - set of object
    • action - string
    • subnet_id - string
• public_network_access_enabled optional - bool
• quarantine_policy_enabled optional - bool
• resource_group_name required - string
• retention_policy optional computed - list of object
  • days - number
  • enabled - bool
• sku optional - string
• storage_account_id optional - string
• tags optional - map from string to string
• trust_policy optional computed - list of object
  • enabled - bool
• timeouts single block
  • create optional - string
  • delete optional - string
  • read optional - string
  • update optional - string

Explanation in Terraform Registry

Manages an Azure Container Registry.

Note: All arguments including the access key will be stored in the raw state as plain-text. Read more about sensitive data in state.

Tips: Best Practices for The Other Azure Container Resources

In addition to the azurerm_kubernetes_cluster, Azure Container has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.

azurerm_kubernetes_cluster

Ensure to enable logging for AKS

It is better to enable AKS logging to Azure Monitoring. This provides useful information regarding access and usage.