gcr.io artifact registry requires storage viewer permission to download Images

[dikshant-infra]

Hi,

I I have created a serviceaccount with artifactregistry/viewer access to pull the images. I am able to pull images from registry like eu.gcr.io, us.gcr.io and asia.gcr.io but unable to pull image from gcr.io repository. 
After debugging, I am unable to solve this issue. I am unable to find the reason why it only need for gcr.io registry.

Any suggestions are helpful as I can see others are also facing same issue.
Commands I am using are attached below.
gcloud projects add-iam-policy-binding <<project-name>> --member="serviceAccount:test-@<<project-name>>.iam.gserviceaccount.com" --role="roles/artifactregistry.reader"

Downlaoded the keys as json from that serviceaccount and use as below to authenticate.
cat test-4723e484af84.json |docker login -u _json_key --password-stdin \
https://gcr.io

[Manish_B]

Hello @dikshant-infra, 

I kindly request your cooperation in providing the following information regarding the reported issue:

1. Has this scenario ever worked as expected in the past?
2. Do you see this issue constantly or intermittently ?
3. If this issue is seen intermittently, then how often do you observe this issue ? Is there any specific scenario or time at which this issue is observed ?
4. To help us understand the issue better, please provide detailed steps to reliably reproduce the problem.
5. It would be greatly helpful if you could attach screenshots of the output related to this issue.

Your cooperation in providing these details will enable me to dive deeper into the matter and work towards a prompt resolution.

Thank you for your understanding and cooperation.

Thanks & Regards, 

Manish Bavireddy.