Container Security

This is an old revision of the document!

https://docs.microsoft.com/bs-latn-ba/azure/container-registry/container-registry-roles
CNI (container network interface is plug-in to k8s that creates a NIC in a container and integrates that with the host network.
When a new AKS cluster is created a managed identity is automatically created. This identity can be assigned the to the AcrPull role to allow the cluster to access and Azure Container Registry.