Accessing Ping Secure Container Images
This article explains how to authorise your Docker CLI tool to access Ping’s Secure Container images stored in Google Cloud’s Artifact Registry. Artifact Registry is Google’s service for storing, managing and securing build artifacts, including container images. After following the steps outlined below, you’ll be able to pull images from the registry using standard Docker commands.
Prerequisites
Before you begin, ensure that you have the following installed and configured:
-
Docker.
-
Google Cloud CLI.
-
Your subscription must have the relevant Secure Containers SKU(s) and you must be a member of that subscription.
-
You have a GCP Secure Containers subscription credential. The following article explains how to create one: How To Configure Service Credentials (Push Auth, Docker) in Backstage.
Configure Docker Credentials
The simplest method for authenticating to Google Cloud’s Artifact Registry is to use gcloud CLI Helper. The gcloud command sets up Docker to use a credential helper that handles the authentication flow automatically, so you don’t have to manually manage tokens:
-
First, activate your service account using the path to your JSON key file:
gcloud auth activate-service-account --key-file=/path/to/your-key.json -
Then, run the command to configure Docker’s credential helper for the registry:
gcloud auth configure-docker us-central1-docker.pkg.dev
Verify the configuration
At this point, your Docker CLI should be correctly configured to access the registry using standard Docker commands. To test this run the following command to pull the test image:
docker pull us-central1-docker.pkg.dev/bs-secure-containers/end-user-ui/hello-world:0.0.1
Browse the registry
-
List repositories with:gcloud artifacts repositories listThis command will show you a list of all repositories in your project, along with their format and location.
-
List Images in a repositorygcloud artifacts docker images list us-central1-docker.pkg.dev/bs-secure-containers/end-user-uiThis command will list all images in that repository, showing their tags and digest.