Google Cloud Platform container list tags permission denied

user_3080315 0
Viewed 101

When executing the command:

gcloud container images list-tags gcr.io/x/x

In the terminal, I get the following error:

(gcloud.container.images.list-tags) Access denied: gcr.io/x/x

Which role do I need to give the user so that they are able to execute that command? Thank you.

google-cloud-deploy google-container-registry google-cloud-iam google-cloud-build google-cloud-platform
1 Answers

For read-only purposes (e.g. list-tags), roles/storage.objectViewer should (!?) be sufficient.

Google Container Registry (GCR) is slightly confusing because:

  1. the API is Docker Registry API
  2. the backing storage is Google Cloud Storage (GCS).

As a result of:

  1. there's no Google IAM roles specifically for GCR because there's no Google-specific API
  2. the IAM role that's used is applicable to GCS.
user_6092900
Related