As part of Out-of-Tree Credential Providers, the kubelet builtin image pulling from ACR (which could originally be enabled by setting kubelet --azure-container-registry-config=<config-file>) would be moved out-of-tree credential plugin acr-credential-provider. Please refer the original KEP and the credential provider KEP for details. In order to switch the kubelet credential provider to out-of-tree, you’ll have to Remove --azure-container-registry-config from kubelet configuration options. ...