如何将内容信任策略分配给容器注册表资源 azure powershell

Question

I have created container registry as below through powershell.

$prop = @{
        Location          = "..."
        ResourceName      = "Resource1"
        ResourceType      = "Microsoft.ContainerRegistry/registries" 
        ResourceGroupName = "ResourceGroup.." 
        Force             = $true
        Sku               = @{"Name"="Premium"}
        }
       $registry = New-AzResource @prop"

It gets created successfully, but the content trust policy set for this is "disabled" How can i make it enabled during creation through powershell

Answer 1

As i know and from the resources , currently it is not available to enable via a PowerShell script. However as mentioned above in the resource.

As a work around, If you want to do with only PowerShell, you can create a function and trigger API's from that function.

Answer 2

The content trust policy for the ACR is in its properties, so you need to set it in the commands. Finally, the commands will like this:

$prop = @{
    Location            ="location"
    ResourceName        ="resourceName"
    ResourceType        ="Microsoft.ContainerRegistry/registries"
    ResourceGroupName   ="groupName"
    Sku                 =@{"Name"="Premium"}
    Properties          =@{"Policies"=@{"TrustPolicy"=@{"Type"="Notary";"Status"="enabled"}}}
}
$registry = New-AzResource @prop