When i use a service account to connect to Artifact Registry to download artifact from a remote repository configured to docker hub repo i get below error message
denied: Permission "artifactregistry.repositories.downloadArtifacts" denied on resource "projects/<ProjectName>locations/asia/repositories/dockerhub-proxy" (or it may not exist)
checked the service account and it does have artifactregistry.reader policy attached to it.
Following stages are configured in cloud build pipeline
Tried the below commands from cloud shell as a user and still got the same error.
gcloud auth configure-docker asia-docker.pkg.dev
docker pull asia-docker.pkg.dev/<ProjectName>/dockerhub-proxy:21-alpine3.19