Cannot deploy container image from Google Cloud Container Registry about docs

[steren]

I'd recommend following our setup guide from scratch again and try to deploy a built image hosted in the project. I will not have time right now to help with that.

[steren]

The project name has been redacted, but assume I am an owner of the demo-project project

[mchmarny]

Not 100% sure this is the issue but if you're pulling images sans service account, you will have to make sure your k8s cluster has storage reader scope enabled. We should document that and/or make sure the right scope is defaulted to the cluster create script to minimize this issue.

[mattmoor]

/assign @jonjohnsonjr

[jonjohnsonjr]

@mchmarny is right, docs for GKE auth and general access control. The service account for the GCE nodes of your GKE cluster will have access to GCR within the same project, so I'm surprised this doesn't just work.

[mchmarny]

@steren are you sure you used our documented script to create that cluster?

--scopes=service-control,service-management,compute-rw,storage-ro,cloud-platform,logging-write,monitoring-write,pubsub,datastore \

Looks like all the necessary scopes are there and I just did that very process from scratch yesterday... Will try again though.

[jonjohnsonjr]

Running through the docs now to see if I hit this.

[steren]

I followed the docs yesterday yes, and copy pasted all commands.

[jonjohnsonjr]

I just ran through the docs with a new project and couldn't reproduce this.

[steren]

OK, let's close, I will re-open if I can reproduce.