how to assign "container registry" permissions to virtual machine in Google Cloud

Question

I'm creating a virtual machine in Google Cloud with full access scopes enter image description here

When I connect to the virtual machine by SSH and try to pull a docker image from Container registry, it throws permissions error:

enter image description here

So I wonder how do I give permissions for my Container registry

I thought giving full access to API would solve this problem, but it doesn't

By the way I know I can directly put image from container registry to compute engine, but this is not what I want, it's not gonna be only one image I'll be running, it's gonna be some of them

score 3 · Accepted Answer · answered Oct 07 '19 at 17:53

3

Permissions for Container Registry are controlled by Cloud Storage IAM. Container Registry stores container images in a Cloud Storage bucket in your project.

To authorize docker to use Google credentials there are several methods. I use this method:

gcloud auth configure-docker

However, that method is no longer recommended. This method is recommended:

gcloud components install docker-credential-gcr
docker-credential-gcr configure-docker

Container Registry Authentication Methods

answered Oct 07 '19 at 17:53

John Hanley

74,467
6
95
159

thanks, but how do I install gcloud inside the virtual machine? because container-optimize os(the os I'm using in the virtual machine) does not have gcloud installed – John Balvin Arias Oct 11 '19 at 00:47
1

Check this answer and create a new question. – John Hanley Oct 11 '19 at 01:02

how to assign "container registry" permissions to virtual machine in Google Cloud

1 Answers1