The Image Analysis feature provides an event line that records image push, pull, and delete operations. This helps you analyze potential security risks, such as access from unauthorized public IP addresses and image content risks. This topic describes how to use the Image Analysis feature in Container Registry (ACR) Enterprise Edition.
Prerequisites
To use the image event feature, you must submit a ticket.
-
You have created a Container Registry (ACR) Enterprise Edition instance. For more information, see Create an Enterprise Edition instance.
-
You have pushed an image to the Enterprise Edition instance. For more information, see Push and pull images.
Image event line
By monitoring the event line, you can track image operations in real time, identify and respond to potential security risks, and ensure your images are secure and compliant.
Log on to the Container Registry console.
In the top navigation bar, select a region.
In the left-side navigation pane, click Instances.
On the Instances page, click the Enterprise Edition instance that you want to manage.
-
In the left-side navigation pane, choose . On the Image Analysis page, select the target image based on the following parameters.
Parameter
Description
Example
Namespace
Select the namespace of the target image.
test-namespace
Repository
Select the repository of the target image.
test-repository
Tag
Select the tag of the target image.
v1
-
On the Event line tab, set event filters and a time range. Then, click Search to view the events for the target image.
Parameter
Description
Event Filters
You can filter events by image operation, including Push, Pull, and Delete.
Custom time range
You can query image events from the past 30 days.
On the Event line tab, you can view the event category, client network type, client IP address (only public IP addresses are displayed), and event time. The Event Summary section summarizes the image events within the specified time range.
Image analysis
Before analyzing an image, you must grant the target ACK cluster read permissions on the ACR instance. You can then view the image's deployment details within the authorized cluster.
-
On the Image Analysis page, click Complete authorization to obtain and analyze the usage of images in ACK clusters.
-
In the Cluster Authorization dialog box, find the target cluster and click Add authorization in the Actions column. In the dialog box that appears, click Confirm.
After authorizing the target ACK cluster, on the Image Analysis tab, click Search to analyze the image and view its deployment details.
The Analysis Summary section shows how many ACK clusters and applications use the image. Data is updated daily at 00:00. The table below lists the Deployed application and Namespace information for each selected cluster.