I have a private registry and I want to allow worker nodes (running on Azure Kubernetes Services) to be able to pull images only from this registry.

Is there a way to allow worker nodes to only pull images from a specific private registry?

I would be surprised if the only way to achieve that is through complex firewall rules.