Share via

az acr encryption

  • Reference

Manage container registry encryption.

For more information, see http://aka.ms/acr/cmk.

Commands

Name Description Type Status
az acr encryption rotate-key

Rotate (update) the container registry's encryption key.

 Core GA
az acr encryption show

Show the container registry's encryption details.

 Core GA

az acr encryption rotate-key

Edit

Rotate (update) the container registry's encryption key.

For more information, see http://aka.ms/acr/cmk.

az acr encryption rotate-key --name
                             [--identity]
                             [--key-encryption-key]
                             [--resource-group]

Required Parameters

--name -n

The name of the container registry. It should be specified in lower case. You can configure the default registry name using az configure --defaults acr=<registry name>.

Optional Parameters

--identity

Client id of managed identity, resource name or id of user assigned identity. Use '[system]' to refer to the system assigned identity.

--key-encryption-key

Key vault key uri. To enable automated rotation, provide a version-less key uri. For manual rotation, provide a versioned key uri.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az acr encryption show

Edit

Show the container registry's encryption details.

For more information, see http://aka.ms/acr/cmk.

az acr encryption show --name
                       [--resource-group]

Required Parameters

--name -n

The name of the container registry. It should be specified in lower case. You can configure the default registry name using az configure --defaults acr=<registry name>.

Optional Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.