Allow ACR to use Customer Managed Key based encryption from Key Vault with private endpoint

[jmalkiew]

We'd like to be able to encrypt ACR (accessed via private endpoint) with Customer Managed Key (from Key Vault accessed via private endpoint).

[yugangw-msft]

Before we implement one of the options, the workaround is to use a temporary public key vault and then key rotate to the target vault: 1. Access via private endpoint through user assigned identity 2. Support encrypt an existing registry

[sebastus]

We also need this use case. I would cast my vote for option 2 above: encrypt existing registry.

[leodewang]

https://learn.microsoft.com/en-us/azure/container-registry/tutorial-customer-managed-keys

[github-actions[bot]]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.