Create Service Connection from Azure DevOps to GCP Artifact Registry

Question

Are there any tutorials for creating a service account for the GCP Artifact Registry?

I have tried this: https://cloud.google.com/architecture/creating-cicd-pipeline-vsts-kubernetes-engine but it uses GCP Container Registry.

I get this error because of this difference.

##[error]denied: Permission "artifactregistry.repositories.downloadArtifacts" denied on resource.

But the service account I created has the permissions needed (albeit those roles are in beta). I even gave it a very elevated role and still getting this.

when I created the service connect I followed these steps from the documentation linked above:

• Docker Registry: https://gcr.io/PROJECT_ID, replacing PROJECT_ID with the name of your project (for example, https://gcr.io/azure-pipelines-test-project-12345).
• Docker ID: _json_key
• Password: Paste the content of azure-pipelines-publisher-oneline.json.
• Service connection name: gcr-tutorial.

Any advice would be appreciated.