Artifact Registry can store Docker and OCI container images in a Docker repository.
To get familiar with container images in Artifact Registry, you can try the quickstart.
When you are ready to learn more, read the following information:
- Create a Docker repository for your images.
- Grant permissions to the account that
will connect with the repository.
- The default service account for Compute Engine, Cloud Run, and Google Kubernetes Engine has permissions to pull from Artifact Registry repositories in the same Google Cloud project.
- The Cloud Build default service account has permissions to push to and pull from Artifact Registry repositories in the same Google Cloud project.
- If you are using a Docker client to push and pull images, configure authentication to Artifact Registry.
- Learn about pushing and pulling images.
- Learn about managing images.
Learn how to manage container metadata with attachments. Attachments are OCI artifacts that hold metadata about another container image.
Metadata can be any relevant information you want to store that is related to a container image, including files you can scan or generate with Artifact Analysis:
Set up Pub/Sub notifications for changes to your repository.
Set up Artifact Analysis to manage image metadata and scan for vulnerabilities.