[Action Required] Ensure read access on container images deployed to Cloud Run

[alexandramaria7]

Hello! I have received the email for ensuring read access on container images deployed to Cloud Run, but I am still using Container registry (I plan to do the migration to Artifact Registry in January 2025). I can see the errors mentioned in Logs explorer, that two service accounts don't have access to image "X", I granted to them "Storage Object Viewer" role which is equivalent to "Artifact Registry Reader" role, but I still get the error messages. Can you please tell me if this email is applicable for Container registry also? because I am not sure what permission should I give to my service accounts since we do not push/pull from Artifact registry yet. Thank you!

[knet · Accepted solution]

The email does apply to images stored in Container Registry. It sounds like you've already granted the correct role, Storage Object Viewer. 

We currently have an issue where we log this permission error for Container Registry images even when the developer does have the required permissions on the container. I suggest checking logs again in maybe 2 weeks to see if the error has gone away.

[alexandramaria7]

Hello, 

Thank you for answering, I'll do that.