How to use an image from container registry in different project?

Question

I have two projects in Google Cloud. On the first project I have some images in the container registry and i'm using it in the gke.

When I trie to create a container in the second project, it gives me a error:

Error: Status 403 trying to pull repository project-1/image-x: "Access denied."

How can i use those images in the gke but in different project? I don't want to create the same images in the second project.

Answer 1

In your second project (the GKE project), look at the IAM permissions and you will see a user similar to: [email protected].

Then in your first project (the container registry project), grant that user the Storage Object Viewer permission to allow GKE to pull images.