Unable to test GCR feed integration

[Piotr (Piotr Janik)]

Hello,
I have a problem related with GCR feed in Octopus. After configuration I cannot get information about any of my packages.
My configuration looks like this:

My service account has Storage Object Viewer role in bucket that represent that registry. This account is also used in on-premises machines and retrieve any images from registry. When i try to test this connection, I don’t see any result.
Tested package names:

• eu.gcr.io/PROJECT_ID/IMAGE_NAME
• PROJECT_ID/IMAGE_NAME
• IMAGE_NAME

But I don’t see any errors or results. Could you help me with that problem ?

Best regards
Piotr

[sergei.dubovsky]

Hi Piotr,

Thank you for contacting Octopus support.

We have a GRC feed in one of our sample projects. It seems the proper package name would be PROJECT_ID/IMAGE_NAME

We tested it with “Storage Object Viewer” permission and it seems to work.

Thank you.
Sergei

[Piotr (Piotr Janik)]

Hello @sergei.dubovsky,

I double checked everything. I also test the same service account and key.json locally.

1. I authenticate as a service account with command gcloud auth activate-service-account EMAIL --key-file=key.json
2. Then I perform command curl -X GET -H “Authorization: Bearer $(gcloud auth print-access-token)” https://eu.gcr.io/v2/PROJECT_ID/IAMGE_NAME/tags/list
3. I see in my terminal all tags related with specific image

But when I call curl -X GET -H “Authorization: Bearer $(gcloud auth print-access-token)” https://eu.gcr.io/v2/_catalog, response was empty. But when I grant service account Project Viewer Role, then Octopus see packages. Works also, with Project Browser role.

So probably you have much wider role, not just Storage Object Viewer and should be described in documentation.

Best
Piotr

[sergei.dubovsky]

Hi @Piotr,

Thank you for the update. It will be valuable knowledge. I will address this with our documentation team.

Thanks again.
Sergei