You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -65,7 +65,7 @@ The main steps you'll follow when using a container image are:
65
65
- For a private registry, give the DevCenter ACR permissions.
66
66
1. Add your image location to the `runner` parameter in your environment definition
67
67
1. Deploy environments that use your custom image.
68
-
1.
68
+
69
69
The first step in the process is to choose the type of image you want to use. Select the corresponding tab to see the process.
70
70
71
71
### [Use a sample container image](#tab/sample/)
@@ -513,13 +513,13 @@ Select the appropriate tab to learn more about each approach.
513
513
514
514
### [Private registry](#tab/private-registry/)
515
515
516
-
**Use a private registry with secured access**
516
+
### Use a private registry with secured access
517
517
518
518
By default, access to pull or push content from an Azure Container Registry is only available to authenticated users. You can further secure access to ACR by limiting access from certain networks and assigning specific roles.
519
519
520
520
To create an instance of ACR, which can be done through the Azure CLI, the Azure portal, PowerShell commands, and more, follow one of the [quickstarts](/azure/container-registry/container-registry-get-started-azure-cli).
521
521
522
-
**1. Limit network access**
522
+
#### Limit network access
523
523
524
524
To secure network access to your ACR, you can limit access to your own networks, or disable public network access entirely. If you limit network access, you must enable the firewall exception *Allow trusted Microsoft services to access this container registry*.
525
525
@@ -536,7 +536,7 @@ To disable access from public networks:
536
536
537
537
:::image type="content" source="media/how-to-configure-extensibility-bicep-container-image/container-registry-network-disable-public.png" alt-text="Screenshot of the ACR network settings, with Allow trusted Microsoft services to access this container registry and Save highlighted.":::
538
538
539
-
**2. Assign the AcrPull role**
539
+
#### Assign the AcrPull role
540
540
541
541
Creating environments by using container images uses the ADE infrastructure, including projects and environment types. Each project has one or more project environment types, which need read access to the container image that defines the environment to be deployed. To access the images within your ACR securely, assign the AcrPull role to each project environment type.
0 commit comments