Google Cloud Registry Connector

For Google Cloud Registry (GCR), you can create a GCR connector to connect to your Google Cloud Platform (GCP) account.

Create Connector for Google Cloud Registry

1. In the Container Security UI, go to Assets > Registries and click New Registry.  
2. Pick Google Cloud Registry from the Registry Type menu.  
3. Select the registry location from the Location menu.  
4. Click Create New next to the Connector field. 
5. On the Connector Details page, give your connector a name.  
6. Continue with the steps below to enable access to certain APIs, create a service account and download the configuration (JSON) file.  When you're done, upload the configuration file to the connector details.

   Note that the steps you need also appear in the UI, on the right side of the Connector Details screen.

Enable Access to APIs in API Library

1. Login to the Google Cloud Platform (GCP) console.
2. Select the organization.
3. Select a project or create a new project. (It's important that you select the correct project.)
4. In the left sidebar, navigate to APIs and Services.
5. You'll need to enable access to the APIs listed below. In the API Library, search for each API by name, click Manage, and then click Enable API.
   • Search Compute Engine API
   • Cloud Resource Manager API
   • Compute Engine API
   • Kubernetes Engine API
   • Cloud SQL Admin API

Create Service Account and Download Configuration File

1. Login to the Google Cloud Platform (GCP) console.
2. Select the project.
3. From the left sidebar, navigate to IAM & admin > Service accounts and click CREATE SERVICE ACCOUNT. Provide a name and description (optional) for the service account and click CREATE.
4. Choose Viewer and Security Reviewer role to assign at least reader permissions to the service account and click CONTINUE.
5. Click CREATE KEY. Select JSON as Key type and click CREATE. A message saying “Private key saved to your computer” is displayed and the JSON file is downloaded to your computer. Click CLOSE and then click DONE.
6. Upload the configuration (JSON) file to the connector details.