containerregistry.azure.com/v20251101
APIVersion
| Value | Description |
|---|---|
| “2025-11-01” |
Registry
Generator information:
- Generated from: /containerregistry/resource-manager/Microsoft.ContainerRegistry/Registry/stable/2025-11-01/containerregistry.json
- ARM URI: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerRegistry/registries/{registryName}
Used by: RegistryList.
| Property | Description | Type |
|---|---|---|
| metav1.TypeMeta | ||
| metav1.ObjectMeta | ||
| spec | Registry_Spec Optional |
|
| status | Registry_STATUS Optional |
Registry_Spec
| Property | Description | Type |
|---|---|---|
| adminUserEnabled | The value that indicates whether the admin user is enabled. | bool Optional |
| anonymousPullEnabled | Enables registry-wide pull from unauthenticated clients. | bool Optional |
| azureName | The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be. | string Optional |
| dataEndpointEnabled | Enable a single data endpoint per region for serving data. | bool Optional |
| encryption | The encryption settings of container registry. | EncryptionProperty Optional |
| identity | The identity of the container registry. | IdentityProperties Optional |
| location | The geo-location where the resource lives | string Required |
| networkRuleBypassAllowedForTasks | Whether or not Tasks allowed to bypass the network rules for this container registry. | bool Optional |
| networkRuleBypassOptions | Whether to allow trusted Azure services to access a network restricted registry. | RegistryProperties_NetworkRuleBypassOptions Optional |
| networkRuleSet | The network rule set for a container registry. | NetworkRuleSet Optional |
| operatorSpec | The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure | RegistryOperatorSpec Optional |
| owner | The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource | genruntime.KnownResourceReference Required |
| policies | The policies for a container registry. | Policies Optional |
| publicNetworkAccess | Whether or not public network access is allowed for the container registry. | RegistryProperties_PublicNetworkAccess Optional |
| roleAssignmentMode | Determines registry role assignment mode. | RegistryProperties_RoleAssignmentMode Optional |
| sku | The SKU of the container registry. | Sku Required |
| tags | Resource tags. | map[string]string Optional |
| zoneRedundancy | Whether or not zone redundancy is enabled for this container registry | RegistryProperties_ZoneRedundancy Optional |
Registry_STATUS
| Property | Description | Type |
|---|---|---|
| adminUserEnabled | The value that indicates whether the admin user is enabled. | bool Optional |
| anonymousPullEnabled | Enables registry-wide pull from unauthenticated clients. | bool Optional |
| conditions | The observed state of the resource | conditions.Condition[] Optional |
| creationDate | The creation date of the container registry in ISO8601 format. | string Optional |
| dataEndpointEnabled | Enable a single data endpoint per region for serving data. | bool Optional |
| dataEndpointHostNames | List of host names that will serve data when dataEndpointEnabled is true. | string[] Optional |
| encryption | The encryption settings of container registry. | EncryptionProperty_STATUS Optional |
| id | Fully qualified resource ID for the resource. E.g. “/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}” | string Optional |
| identity | The identity of the container registry. | IdentityProperties_STATUS Optional |
| location | The geo-location where the resource lives | string Optional |
| loginServer | The URL that can be used to log into the container registry. | string Optional |
| name | The name of the resource | string Optional |
| networkRuleBypassAllowedForTasks | Whether or not Tasks allowed to bypass the network rules for this container registry. | bool Optional |
| networkRuleBypassOptions | Whether to allow trusted Azure services to access a network restricted registry. | RegistryProperties_NetworkRuleBypassOptions_STATUS Optional |
| networkRuleSet | The network rule set for a container registry. | NetworkRuleSet_STATUS Optional |
| policies | The policies for a container registry. | Policies_STATUS Optional |
| privateEndpointConnections | List of private endpoint connections for a container registry. | PrivateEndpointConnection_STATUS[] Optional |
| provisioningState | The provisioning state of the container registry at the time the operation was called. | ProvisioningState_STATUS Optional |
| publicNetworkAccess | Whether or not public network access is allowed for the container registry. | RegistryProperties_PublicNetworkAccess_STATUS Optional |
| roleAssignmentMode | Determines registry role assignment mode. | RegistryProperties_RoleAssignmentMode_STATUS Optional |
| sku | The SKU of the container registry. | Sku_STATUS Optional |
| status | The status of the container registry at the time the operation was called. | Status_STATUS Optional |
| systemData | Azure Resource Manager metadata containing createdBy and modifiedBy information. | SystemData_STATUS Optional |
| tags | Resource tags. | map[string]string Optional |
| type | The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts” | string Optional |
| zoneRedundancy | Whether or not zone redundancy is enabled for this container registry | RegistryProperties_ZoneRedundancy_STATUS Optional |
RegistryCacheRule
Generator information:
- Generated from: /containerregistry/resource-manager/Microsoft.ContainerRegistry/Registry/stable/2025-11-01/containerregistry.json
- ARM URI: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerRegistry/registries/{registryName}/cacheRules/{cacheRuleName}
Used by: RegistryCacheRuleList.
| Property | Description | Type |
|---|---|---|
| metav1.TypeMeta | ||
| metav1.ObjectMeta | ||
| spec | RegistryCacheRule_Spec Optional |
|
| status | RegistryCacheRule_STATUS Optional |
RegistryCacheRule_Spec
| Property | Description | Type |
|---|---|---|
| azureName | The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be. | string Optional |
| credentialSetResourceReference | The ARM resource ID of the credential store which is associated with the cache rule. | genruntime.ResourceReference Optional |
| operatorSpec | The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure | RegistryCacheRuleOperatorSpec Optional |
| owner | The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a containerregistry.azure.com/Registry resource | genruntime.KnownResourceReference Required |
| sourceRepository | Source repository pulled from upstream. | string Optional |
| targetRepository | Target repository specified in docker pull command. Eg: docker pull myregistry.azurecr.io/{targetRepository}:{tag} | string Optional |
RegistryCacheRule_STATUS
| Property | Description | Type |
|---|---|---|
| conditions | The observed state of the resource | conditions.Condition[] Optional |
| creationDate | The creation date of the cache rule. | string Optional |
| credentialSetResourceId | The ARM resource ID of the credential store which is associated with the cache rule. | string Optional |
| id | Fully qualified resource ID for the resource. E.g. “/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}” | string Optional |
| name | The name of the resource | string Optional |
| provisioningState | Provisioning state of the resource. | ProvisioningState_STATUS Optional |
| sourceRepository | Source repository pulled from upstream. | string Optional |
| systemData | Azure Resource Manager metadata containing createdBy and modifiedBy information. | SystemData_STATUS Optional |
| targetRepository | Target repository specified in docker pull command. Eg: docker pull myregistry.azurecr.io/{targetRepository}:{tag} | string Optional |
| type | The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts” | string Optional |
RegistryCacheRuleList
Generator information:
- Generated from: /containerregistry/resource-manager/Microsoft.ContainerRegistry/Registry/stable/2025-11-01/containerregistry.json
- ARM URI: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerRegistry/registries/{registryName}/cacheRules/{cacheRuleName}
| Property | Description | Type |
|---|---|---|
| metav1.TypeMeta | ||
| metav1.ListMeta | ||
| items | RegistryCacheRule[] Optional |
RegistryList
Generator information:
- Generated from: /containerregistry/resource-manager/Microsoft.ContainerRegistry/Registry/stable/2025-11-01/containerregistry.json
- ARM URI: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerRegistry/registries/{registryName}
| Property | Description | Type |
|---|---|---|
| metav1.TypeMeta | ||
| metav1.ListMeta | ||
| items | Registry[] Optional |
RegistryReplication
Generator information:
- Generated from: /containerregistry/resource-manager/Microsoft.ContainerRegistry/Registry/stable/2025-11-01/containerregistry.json
- ARM URI: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerRegistry/registries/{registryName}/replications/{replicationName}
Used by: RegistryReplicationList.
| Property | Description | Type |
|---|---|---|
| metav1.TypeMeta | ||
| metav1.ObjectMeta | ||
| spec | RegistryReplication_Spec Optional |
|
| status | RegistryReplication_STATUS Optional |
RegistryReplication_Spec
| Property | Description | Type |
|---|---|---|
| azureName | The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be. | string Optional |
| location | The geo-location where the resource lives | string Required |
| operatorSpec | The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure | RegistryReplicationOperatorSpec Optional |
| owner | The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a containerregistry.azure.com/Registry resource | genruntime.KnownResourceReference Required |
| regionEndpointEnabled | Specifies whether the replication’s regional endpoint is enabled. Requests will not be routed to a replication whose regional endpoint is disabled, however its data will continue to be synced with other replications. | bool Optional |
| tags | Resource tags. | map[string]string Optional |
| zoneRedundancy | Whether or not zone redundancy is enabled for this container registry replication | ReplicationProperties_ZoneRedundancy Optional |
RegistryReplication_STATUS
| Property | Description | Type |
|---|---|---|
| conditions | The observed state of the resource | conditions.Condition[] Optional |
| id | Fully qualified resource ID for the resource. E.g. “/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}” | string Optional |
| location | The geo-location where the resource lives | string Optional |
| name | The name of the resource | string Optional |
| provisioningState | The provisioning state of the replication at the time the operation was called. | ProvisioningState_STATUS Optional |
| regionEndpointEnabled | Specifies whether the replication’s regional endpoint is enabled. Requests will not be routed to a replication whose regional endpoint is disabled, however its data will continue to be synced with other replications. | bool Optional |
| status | The status of the replication at the time the operation was called. | Status_STATUS Optional |
| systemData | Azure Resource Manager metadata containing createdBy and modifiedBy information. | SystemData_STATUS Optional |
| tags | Resource tags. | map[string]string Optional |
| type | The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts” | string Optional |
| zoneRedundancy | Whether or not zone redundancy is enabled for this container registry replication | ReplicationProperties_ZoneRedundancy_STATUS Optional |
RegistryReplicationList
Generator information:
- Generated from: /containerregistry/resource-manager/Microsoft.ContainerRegistry/Registry/stable/2025-11-01/containerregistry.json
- ARM URI: /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ContainerRegistry/registries/{registryName}/replications/{replicationName}
| Property | Description | Type |
|---|---|---|
| metav1.TypeMeta | ||
| metav1.ListMeta | ||
| items | RegistryReplication[] Optional |
Registry_Spec
Used by: Registry.
| Property | Description | Type |
|---|---|---|
| adminUserEnabled | The value that indicates whether the admin user is enabled. | bool Optional |
| anonymousPullEnabled | Enables registry-wide pull from unauthenticated clients. | bool Optional |
| azureName | The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be. | string Optional |
| dataEndpointEnabled | Enable a single data endpoint per region for serving data. | bool Optional |
| encryption | The encryption settings of container registry. | EncryptionProperty Optional |
| identity | The identity of the container registry. | IdentityProperties Optional |
| location | The geo-location where the resource lives | string Required |
| networkRuleBypassAllowedForTasks | Whether or not Tasks allowed to bypass the network rules for this container registry. | bool Optional |
| networkRuleBypassOptions | Whether to allow trusted Azure services to access a network restricted registry. | RegistryProperties_NetworkRuleBypassOptions Optional |
| networkRuleSet | The network rule set for a container registry. | NetworkRuleSet Optional |
| operatorSpec | The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure | RegistryOperatorSpec Optional |
| owner | The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a resources.azure.com/ResourceGroup resource | genruntime.KnownResourceReference Required |
| policies | The policies for a container registry. | Policies Optional |
| publicNetworkAccess | Whether or not public network access is allowed for the container registry. | RegistryProperties_PublicNetworkAccess Optional |
| roleAssignmentMode | Determines registry role assignment mode. | RegistryProperties_RoleAssignmentMode Optional |
| sku | The SKU of the container registry. | Sku Required |
| tags | Resource tags. | map[string]string Optional |
| zoneRedundancy | Whether or not zone redundancy is enabled for this container registry | RegistryProperties_ZoneRedundancy Optional |
Registry_STATUS
An object that represents a container registry.
Used by: Registry.
| Property | Description | Type |
|---|---|---|
| adminUserEnabled | The value that indicates whether the admin user is enabled. | bool Optional |
| anonymousPullEnabled | Enables registry-wide pull from unauthenticated clients. | bool Optional |
| conditions | The observed state of the resource | conditions.Condition[] Optional |
| creationDate | The creation date of the container registry in ISO8601 format. | string Optional |
| dataEndpointEnabled | Enable a single data endpoint per region for serving data. | bool Optional |
| dataEndpointHostNames | List of host names that will serve data when dataEndpointEnabled is true. | string[] Optional |
| encryption | The encryption settings of container registry. | EncryptionProperty_STATUS Optional |
| id | Fully qualified resource ID for the resource. E.g. “/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}” | string Optional |
| identity | The identity of the container registry. | IdentityProperties_STATUS Optional |
| location | The geo-location where the resource lives | string Optional |
| loginServer | The URL that can be used to log into the container registry. | string Optional |
| name | The name of the resource | string Optional |
| networkRuleBypassAllowedForTasks | Whether or not Tasks allowed to bypass the network rules for this container registry. | bool Optional |
| networkRuleBypassOptions | Whether to allow trusted Azure services to access a network restricted registry. | RegistryProperties_NetworkRuleBypassOptions_STATUS Optional |
| networkRuleSet | The network rule set for a container registry. | NetworkRuleSet_STATUS Optional |
| policies | The policies for a container registry. | Policies_STATUS Optional |
| privateEndpointConnections | List of private endpoint connections for a container registry. | PrivateEndpointConnection_STATUS[] Optional |
| provisioningState | The provisioning state of the container registry at the time the operation was called. | ProvisioningState_STATUS Optional |
| publicNetworkAccess | Whether or not public network access is allowed for the container registry. | RegistryProperties_PublicNetworkAccess_STATUS Optional |
| roleAssignmentMode | Determines registry role assignment mode. | RegistryProperties_RoleAssignmentMode_STATUS Optional |
| sku | The SKU of the container registry. | Sku_STATUS Optional |
| status | The status of the container registry at the time the operation was called. | Status_STATUS Optional |
| systemData | Azure Resource Manager metadata containing createdBy and modifiedBy information. | SystemData_STATUS Optional |
| tags | Resource tags. | map[string]string Optional |
| type | The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts” | string Optional |
| zoneRedundancy | Whether or not zone redundancy is enabled for this container registry | RegistryProperties_ZoneRedundancy_STATUS Optional |
RegistryCacheRule_Spec
Used by: RegistryCacheRule.
| Property | Description | Type |
|---|---|---|
| azureName | The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be. | string Optional |
| credentialSetResourceReference | The ARM resource ID of the credential store which is associated with the cache rule. | genruntime.ResourceReference Optional |
| operatorSpec | The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure | RegistryCacheRuleOperatorSpec Optional |
| owner | The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a containerregistry.azure.com/Registry resource | genruntime.KnownResourceReference Required |
| sourceRepository | Source repository pulled from upstream. | string Optional |
| targetRepository | Target repository specified in docker pull command. Eg: docker pull myregistry.azurecr.io/{targetRepository}:{tag} | string Optional |
RegistryCacheRule_STATUS
Used by: RegistryCacheRule.
| Property | Description | Type |
|---|---|---|
| conditions | The observed state of the resource | conditions.Condition[] Optional |
| creationDate | The creation date of the cache rule. | string Optional |
| credentialSetResourceId | The ARM resource ID of the credential store which is associated with the cache rule. | string Optional |
| id | Fully qualified resource ID for the resource. E.g. “/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}” | string Optional |
| name | The name of the resource | string Optional |
| provisioningState | Provisioning state of the resource. | ProvisioningState_STATUS Optional |
| sourceRepository | Source repository pulled from upstream. | string Optional |
| systemData | Azure Resource Manager metadata containing createdBy and modifiedBy information. | SystemData_STATUS Optional |
| targetRepository | Target repository specified in docker pull command. Eg: docker pull myregistry.azurecr.io/{targetRepository}:{tag} | string Optional |
| type | The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts” | string Optional |
RegistryReplication_Spec
Used by: RegistryReplication.
| Property | Description | Type |
|---|---|---|
| azureName | The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be. | string Optional |
| location | The geo-location where the resource lives | string Required |
| operatorSpec | The specification for configuring operator behavior. This field is interpreted by the operator and not passed directly to Azure | RegistryReplicationOperatorSpec Optional |
| owner | The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. Owner is expected to be a reference to a containerregistry.azure.com/Registry resource | genruntime.KnownResourceReference Required |
| regionEndpointEnabled | Specifies whether the replication’s regional endpoint is enabled. Requests will not be routed to a replication whose regional endpoint is disabled, however its data will continue to be synced with other replications. | bool Optional |
| tags | Resource tags. | map[string]string Optional |
| zoneRedundancy | Whether or not zone redundancy is enabled for this container registry replication | ReplicationProperties_ZoneRedundancy Optional |
RegistryReplication_STATUS
Used by: RegistryReplication.
| Property | Description | Type |
|---|---|---|
| conditions | The observed state of the resource | conditions.Condition[] Optional |
| id | Fully qualified resource ID for the resource. E.g. “/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}” | string Optional |
| location | The geo-location where the resource lives | string Optional |
| name | The name of the resource | string Optional |
| provisioningState | The provisioning state of the replication at the time the operation was called. | ProvisioningState_STATUS Optional |
| regionEndpointEnabled | Specifies whether the replication’s regional endpoint is enabled. Requests will not be routed to a replication whose regional endpoint is disabled, however its data will continue to be synced with other replications. | bool Optional |
| status | The status of the replication at the time the operation was called. | Status_STATUS Optional |
| systemData | Azure Resource Manager metadata containing createdBy and modifiedBy information. | SystemData_STATUS Optional |
| tags | Resource tags. | map[string]string Optional |
| type | The type of the resource. E.g. “Microsoft.Compute/virtualMachines” or “Microsoft.Storage/storageAccounts” | string Optional |
| zoneRedundancy | Whether or not zone redundancy is enabled for this container registry replication | ReplicationProperties_ZoneRedundancy_STATUS Optional |
EncryptionProperty
Used by: Registry_Spec.
| Property | Description | Type |
|---|---|---|
| keyVaultProperties | Key vault properties. | KeyVaultProperties Optional |
| status | Indicates whether or not the encryption is enabled for container registry. | EncryptionStatus Optional |
EncryptionProperty_STATUS
Used by: Registry_STATUS.
| Property | Description | Type |
|---|---|---|
| keyVaultProperties | Key vault properties. | KeyVaultProperties_STATUS Optional |
| status | Indicates whether or not the encryption is enabled for container registry. | EncryptionStatus_STATUS Optional |
IdentityProperties
Managed identity for the resource.
Used by: Registry_Spec.
| Property | Description | Type |
|---|---|---|
| type | The identity type. | ResourceIdentityType Optional |
| userAssignedIdentities | The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource ids in the form: ‘/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/ providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}’. | UserAssignedIdentityDetails[] Optional |
IdentityProperties_STATUS
Managed identity for the resource.
Used by: Registry_STATUS.
| Property | Description | Type |
|---|---|---|
| principalId | The principal ID of resource identity. | string Optional |
| tenantId | The tenant ID of resource. | string Optional |
| type | The identity type. | ResourceIdentityType_STATUS Optional |
| userAssignedIdentities | The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource ids in the form: ‘/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/ providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}’. | map[string]UserIdentityProperties_STATUS Optional |
NetworkRuleSet
The network rule set for a container registry.
Used by: Registry_Spec.
| Property | Description | Type |
|---|---|---|
| defaultAction | The default action of allow or deny when no other rules match. | NetworkRuleSet_DefaultAction Required |
| ipRules | The IP ACL rules. | IPRule[] Optional |
NetworkRuleSet_STATUS
The network rule set for a container registry.
Used by: Registry_STATUS.
| Property | Description | Type |
|---|---|---|
| defaultAction | The default action of allow or deny when no other rules match. | NetworkRuleSet_DefaultAction_STATUS Optional |
| ipRules | The IP ACL rules. | IPRule_STATUS[] Optional |
Policies
The policies for a container registry.
Used by: Registry_Spec.
| Property | Description | Type |
|---|---|---|
| azureADAuthenticationAsArmPolicy | The policy for using Azure Resource Manager audience token for a container registry. | AzureADAuthenticationAsArmPolicy Optional |
| exportPolicy | The export policy for a container registry. | ExportPolicy Optional |
| quarantinePolicy | The quarantine policy for a container registry. | QuarantinePolicy Optional |
| retentionPolicy | The retention policy for a container registry. | RetentionPolicy Optional |
| trustPolicy | The content trust policy for a container registry. | TrustPolicy Optional |
Policies_STATUS
The policies for a container registry.
Used by: Registry_STATUS.
| Property | Description | Type |
|---|---|---|
| azureADAuthenticationAsArmPolicy | The policy for using Azure Resource Manager audience token for a container registry. | AzureADAuthenticationAsArmPolicy_STATUS Optional |
| exportPolicy | The export policy for a container registry. | ExportPolicy_STATUS Optional |
| quarantinePolicy | The quarantine policy for a container registry. | QuarantinePolicy_STATUS Optional |
| retentionPolicy | The retention policy for a container registry. | RetentionPolicy_STATUS Optional |
| trustPolicy | The content trust policy for a container registry. | TrustPolicy_STATUS Optional |
PrivateEndpointConnection_STATUS
An object that represents a private endpoint connection for a container registry.
Used by: Registry_STATUS.
| Property | Description | Type |
|---|---|---|
| id | Fully qualified resource ID for the resource. E.g. “/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}” | string Optional |
ProvisioningState_STATUS
The provisioning state of the archive at the time the operation was called.
Used by: Registry_STATUS, RegistryCacheRule_STATUS, and RegistryReplication_STATUS.
| Value | Description |
|---|---|
| “Canceled” | |
| “Creating” | |
| “Deleting” | |
| “Failed” | |
| “Succeeded” | |
| “Updating” |
RegistryCacheRuleOperatorSpec
Details for configuring operator behavior. Fields in this struct are interpreted by the operator directly rather than being passed to Azure
Used by: RegistryCacheRule_Spec.
| Property | Description | Type |
|---|---|---|
| configMapExpressions | configures where to place operator written dynamic ConfigMaps (created with CEL expressions). | core.DestinationExpression[] Optional |
| secretExpressions | configures where to place operator written dynamic secrets (created with CEL expressions). | core.DestinationExpression[] Optional |
RegistryOperatorSpec
Details for configuring operator behavior. Fields in this struct are interpreted by the operator directly rather than being passed to Azure
Used by: Registry_Spec.
| Property | Description | Type |
|---|---|---|
| configMapExpressions | configures where to place operator written dynamic ConfigMaps (created with CEL expressions). | core.DestinationExpression[] Optional |
| secretExpressions | configures where to place operator written dynamic secrets (created with CEL expressions). | core.DestinationExpression[] Optional |
RegistryProperties_NetworkRuleBypassOptions
Used by: Registry_Spec.
| Value | Description |
|---|---|
| “AzureServices” | |
| “None” |
RegistryProperties_NetworkRuleBypassOptions_STATUS
Used by: Registry_STATUS.
| Value | Description |
|---|---|
| “AzureServices” | |
| “None” |
RegistryProperties_PublicNetworkAccess
Used by: Registry_Spec.
| Value | Description |
|---|---|
| “Disabled” | |
| “Enabled” |
RegistryProperties_PublicNetworkAccess_STATUS
Used by: Registry_STATUS.
| Value | Description |
|---|---|
| “Disabled” | |
| “Enabled” |
RegistryProperties_RoleAssignmentMode
Used by: Registry_Spec.
| Value | Description |
|---|---|
| “AbacRepositoryPermissions” | |
| “LegacyRegistryPermissions” |
RegistryProperties_RoleAssignmentMode_STATUS
Used by: Registry_STATUS.
| Value | Description |
|---|---|
| “AbacRepositoryPermissions” | |
| “LegacyRegistryPermissions” |
RegistryProperties_ZoneRedundancy
Used by: Registry_Spec.
| Value | Description |
|---|---|
| “Disabled” | |
| “Enabled” |
RegistryProperties_ZoneRedundancy_STATUS
Used by: Registry_STATUS.
| Value | Description |
|---|---|
| “Disabled” | |
| “Enabled” |
RegistryReplicationOperatorSpec
Details for configuring operator behavior. Fields in this struct are interpreted by the operator directly rather than being passed to Azure
Used by: RegistryReplication_Spec.
| Property | Description | Type |
|---|---|---|
| configMapExpressions | configures where to place operator written dynamic ConfigMaps (created with CEL expressions). | core.DestinationExpression[] Optional |
| secretExpressions | configures where to place operator written dynamic secrets (created with CEL expressions). | core.DestinationExpression[] Optional |
ReplicationProperties_ZoneRedundancy
Used by: RegistryReplication_Spec.
| Value | Description |
|---|---|
| “Disabled” | |
| “Enabled” |
ReplicationProperties_ZoneRedundancy_STATUS
Used by: RegistryReplication_STATUS.
| Value | Description |
|---|---|
| “Disabled” | |
| “Enabled” |
Sku
The SKU of a container registry.
Used by: Registry_Spec.
| Property | Description | Type |
|---|---|---|
| name | The SKU name of the container registry. Required for registry creation. | SkuName Required |
Sku_STATUS
The SKU of a container registry.
Used by: Registry_STATUS.
| Property | Description | Type |
|---|---|---|
| name | The SKU name of the container registry. Required for registry creation. | SkuName_STATUS Optional |
| tier | The SKU tier based on the SKU name. | SkuTier_STATUS Optional |
Status_STATUS
The status of an Azure resource at the time the operation was called.
Used by: Registry_STATUS, and RegistryReplication_STATUS.
| Property | Description | Type |
|---|---|---|
| displayStatus | The short label for the status. | string Optional |
| message | The detailed message for the status, including alerts and error messages. | string Optional |
| timestamp | The timestamp when the status was changed to the current value. | string Optional |
SystemData_STATUS
Metadata pertaining to creation and last modification of the resource.
Used by: Registry_STATUS, RegistryCacheRule_STATUS, and RegistryReplication_STATUS.
| Property | Description | Type |
|---|---|---|
| createdAt | The timestamp of resource creation (UTC). | string Optional |
| createdBy | The identity that created the resource. | string Optional |
| createdByType | The type of identity that created the resource. | SystemData_CreatedByType_STATUS Optional |
| lastModifiedAt | The timestamp of resource last modification (UTC) | string Optional |
| lastModifiedBy | The identity that last modified the resource. | string Optional |
| lastModifiedByType | The type of identity that last modified the resource. | SystemData_LastModifiedByType_STATUS Optional |
AzureADAuthenticationAsArmPolicy
The policy for using Azure Resource Manager audience token for a container registry.
Used by: Policies.
| Property | Description | Type |
|---|---|---|
| status | The value that indicates whether the policy is enabled or not. | AzureADAuthenticationAsArmPolicy_Status Optional |
AzureADAuthenticationAsArmPolicy_STATUS
The policy for using Azure Resource Manager audience token for a container registry.
Used by: Policies_STATUS.
| Property | Description | Type |
|---|---|---|
| status | The value that indicates whether the policy is enabled or not. | AzureADAuthenticationAsArmPolicy_Status_STATUS Optional |
EncryptionStatus
Indicates whether or not the encryption is enabled for container registry.
Used by: EncryptionProperty.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
EncryptionStatus_STATUS
Indicates whether or not the encryption is enabled for container registry.
Used by: EncryptionProperty_STATUS.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
ExportPolicy
The export policy for a container registry.
Used by: Policies.
| Property | Description | Type |
|---|---|---|
| status | The value that indicates whether the policy is enabled or not. | ExportPolicy_Status Optional |
ExportPolicy_STATUS
The export policy for a container registry.
Used by: Policies_STATUS.
| Property | Description | Type |
|---|---|---|
| status | The value that indicates whether the policy is enabled or not. | ExportPolicy_Status_STATUS Optional |
IPRule
IP rule with specific IP or IP range in CIDR format.
Used by: NetworkRuleSet.
| Property | Description | Type |
|---|---|---|
| action | The action of IP ACL rule. | IPRule_Action Optional |
| value | Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed. | string Required |
IPRule_STATUS
IP rule with specific IP or IP range in CIDR format.
Used by: NetworkRuleSet_STATUS.
| Property | Description | Type |
|---|---|---|
| action | The action of IP ACL rule. | IPRule_Action_STATUS Optional |
| value | Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed. | string Optional |
KeyVaultProperties
Used by: EncryptionProperty.
| Property | Description | Type |
|---|---|---|
| identity | The client id of the identity which will be used to access key vault. | string Optional |
| identityFromConfig | The client id of the identity which will be used to access key vault. | genruntime.ConfigMapReference Optional |
| keyIdentifier | Key vault uri to access the encryption key. | string Optional |
KeyVaultProperties_STATUS
Used by: EncryptionProperty_STATUS.
| Property | Description | Type |
|---|---|---|
| identity | The client id of the identity which will be used to access key vault. | string Optional |
| keyIdentifier | Key vault uri to access the encryption key. | string Optional |
| keyRotationEnabled | Auto key rotation status for a CMK enabled registry. | bool Optional |
| lastKeyRotationTimestamp | Timestamp of the last successful key rotation. | string Optional |
| versionedKeyIdentifier | The fully qualified key identifier that includes the version of the key that is actually used for encryption. | string Optional |
NetworkRuleSet_DefaultAction
Used by: NetworkRuleSet.
| Value | Description |
|---|---|
| “Allow” | |
| “Deny” |
NetworkRuleSet_DefaultAction_STATUS
Used by: NetworkRuleSet_STATUS.
| Value | Description |
|---|---|
| “Allow” | |
| “Deny” |
QuarantinePolicy
The quarantine policy for a container registry.
Used by: Policies.
| Property | Description | Type |
|---|---|---|
| status | The value that indicates whether the policy is enabled or not. | QuarantinePolicy_Status Optional |
QuarantinePolicy_STATUS
The quarantine policy for a container registry.
Used by: Policies_STATUS.
| Property | Description | Type |
|---|---|---|
| status | The value that indicates whether the policy is enabled or not. | QuarantinePolicy_Status_STATUS Optional |
ResourceIdentityType
The identity type.
Used by: IdentityProperties.
| Value | Description |
|---|---|
| “None” | |
| “SystemAssigned” | |
| “SystemAssigned, UserAssigned” | |
| “UserAssigned” |
ResourceIdentityType_STATUS
The identity type.
Used by: IdentityProperties_STATUS.
| Value | Description |
|---|---|
| “None” | |
| “SystemAssigned” | |
| “SystemAssigned, UserAssigned” | |
| “UserAssigned” |
RetentionPolicy
The retention policy for a container registry.
Used by: Policies.
| Property | Description | Type |
|---|---|---|
| days | The number of days to retain an untagged manifest after which it gets purged. | int Optional |
| status | The value that indicates whether the policy is enabled or not. | RetentionPolicy_Status Optional |
RetentionPolicy_STATUS
The retention policy for a container registry.
Used by: Policies_STATUS.
| Property | Description | Type |
|---|---|---|
| days | The number of days to retain an untagged manifest after which it gets purged. | int Optional |
| lastUpdatedTime | The timestamp when the policy was last updated. | string Optional |
| status | The value that indicates whether the policy is enabled or not. | RetentionPolicy_Status_STATUS Optional |
SkuName
The SKU name of the container registry. Required for registry creation.
Used by: Sku.
| Value | Description |
|---|---|
| “Basic” | |
| “Classic” | |
| “Premium” | |
| “Standard” |
SkuName_STATUS
The SKU name of the container registry. Required for registry creation.
Used by: Sku_STATUS.
| Value | Description |
|---|---|
| “Basic” | |
| “Classic” | |
| “Premium” | |
| “Standard” |
SkuTier_STATUS
The SKU tier based on the SKU name.
Used by: Sku_STATUS.
| Value | Description |
|---|---|
| “Basic” | |
| “Classic” | |
| “Premium” | |
| “Standard” |
SystemData_CreatedByType_STATUS
Used by: SystemData_STATUS.
| Value | Description |
|---|---|
| “Application” | |
| “Key” | |
| “ManagedIdentity” | |
| “User” |
SystemData_LastModifiedByType_STATUS
Used by: SystemData_STATUS.
| Value | Description |
|---|---|
| “Application” | |
| “Key” | |
| “ManagedIdentity” | |
| “User” |
TrustPolicy
The content trust policy for a container registry.
Used by: Policies.
| Property | Description | Type |
|---|---|---|
| status | The value that indicates whether the policy is enabled or not. | TrustPolicy_Status Optional |
| type | The type of trust policy. | TrustPolicy_Type Optional |
TrustPolicy_STATUS
The content trust policy for a container registry.
Used by: Policies_STATUS.
| Property | Description | Type |
|---|---|---|
| status | The value that indicates whether the policy is enabled or not. | TrustPolicy_Status_STATUS Optional |
| type | The type of trust policy. | TrustPolicy_Type_STATUS Optional |
UserAssignedIdentityDetails
Information about the user assigned identity for the resource
Used by: IdentityProperties.
| Property | Description | Type |
|---|---|---|
| reference | genruntime.ResourceReference Optional |
UserIdentityProperties_STATUS
Used by: IdentityProperties_STATUS.
| Property | Description | Type |
|---|---|---|
| clientId | The client id of user assigned identity. | string Optional |
| principalId | The principal id of user assigned identity. | string Optional |
AzureADAuthenticationAsArmPolicy_Status
Used by: AzureADAuthenticationAsArmPolicy.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
AzureADAuthenticationAsArmPolicy_Status_STATUS
Used by: AzureADAuthenticationAsArmPolicy_STATUS.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
ExportPolicy_Status
Used by: ExportPolicy.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
ExportPolicy_Status_STATUS
Used by: ExportPolicy_STATUS.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
IPRule_Action
Used by: IPRule.
| Value | Description |
|---|---|
| “Allow” |
IPRule_Action_STATUS
Used by: IPRule_STATUS.
| Value | Description |
|---|---|
| “Allow” |
QuarantinePolicy_Status
Used by: QuarantinePolicy.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
QuarantinePolicy_Status_STATUS
Used by: QuarantinePolicy_STATUS.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
RetentionPolicy_Status
Used by: RetentionPolicy.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
RetentionPolicy_Status_STATUS
Used by: RetentionPolicy_STATUS.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
TrustPolicy_Status
Used by: TrustPolicy.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
TrustPolicy_Status_STATUS
Used by: TrustPolicy_STATUS.
| Value | Description |
|---|---|
| “disabled” | |
| “enabled” |
TrustPolicy_Type
Used by: TrustPolicy.
| Value | Description |
|---|---|
| “Notary” |
TrustPolicy_Type_STATUS
Used by: TrustPolicy_STATUS.
| Value | Description |
|---|---|
| “Notary” |