Google Container Registry Integration

Google Container Registry (GCR) Credentials

Step 1: Create Service Account Key

1. Go to Google Cloud Console → IAM & Admin → Service Accounts.

2. Click Create Service Account.

3. Fill in the service account details.

4. Assign the following roles:

   • Storage Admin (roles/storage.admin)
   • Storage Object Viewer (roles/storage.objectViewer)

5. Click Create and Continue.

6. Click Create Key and select JSON format.

7. Download and save your key file securely.

💡 Tip: Store your service account key securely. You won't be able to download it again!

Step 2: Add GCR Credentials to Cokpit

1. Open Cokpit and go to Integrations → Container Registry → Google Container Registry.

2. Click Add secret.

3. Fill in the required fields:

   • Enter a unique Secret Name
   • Upload your Service Account Key file
   • Enter the URL (usually gcr.io)

4. Click Submit.

Security Best Practices

• Create service accounts with minimal required permissions
• Rotate service account keys regularly
• Store service account keys securely
• Use different service accounts for different environments
• Monitor service account usage in Cloud Audit Logs