Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Using Workload identity for pulling images from private Artifact Registry

Hi,

I have an image in Artifact Registry and have setup Workoad identity federation for Kubernetes by following instructions from this document. My kubernetes is an K3S light weight install. I am able to perform various activities like sending logs to GCP etc.

I now want to pull an image from Artifact Registry, I gave required permission to Service account but I am not able to pull the image. Is it possible to pull the image with Workload Identity ? If so, is there any documentation that I can pull ? I can only see one possibility of authenticating docker with gcp in docker and upload docker credential as imagePullSecret but I don't want to use static secrets here but use WIF. Any help in this regard ?

Thank you.

2 6 4,716
6 REPLIES 6
Top Labels in this Space
Top Solution Authors