Google Container Registry

Below are steps for setting up a Google Container Registry for use with Metamanagement

1. Create a new GCP project

Instructions for creating a new GCP project can be found here.

2. Enable the relevant GCP APIs

These APIs can be enabled manually by searching for the API by name in the console or by clicking the following links:

• Container Registry API

• Identity and Access Management (IAM) API

• Cloud Resource Manager API

Alternatively, for gcloud users, the API can be enabled by running:

gcloud services enable containerregistry.googleapis.com
gcloud services enable iam.googleapis.com
gcloud services enable cloudresourcemanager.googleapis.com

3. Create a new service account

The new service account you create will be used by Metamanagement to orchestrate setting and unsetting of permissions on the container registry.

Head to the service account section in the IAM services on GCP, and:

1. Hit the "+ Create Service Account" button

2. Give the service account a memorable name -- we recommend "MM Container Permissions Setter". Hit "Create".

3. On the next page, add the following permissions: "Project IAM Admin", "Service Account Admin", "Viewer" (under the "Project" header), and "Service Account Key Admin". Hit "Continue".

4. Hit "Done".

5. Find the service account in the list and click the triple-dot icon under the "Actions" header. Hit "Create key" and select "JSON" when given the option.

You will be asked for this key when creating the project on Metamanagement.