Store dependencies for your App Engine applications in Artifact Registry.
- Declare dependencies in Artifact Registry in your Node.js and Python applications.
- Deploy your application to App Engine leveraging Cloud Build.
Required permissions
- App Engine flexible environment
- If App Engine flexible environment and Artifact Registry are in the same project, the App Engine default service account has permissions to pull containers from repositories.
- If you also use Cloud Build to containerize your applications and store them in Artifact Registry, grant the Artifact Registry Writer role to the Cloud Build service account.
- App Engine standard environment:
- App Engine standard environment uses the Cloud Build service account to
build and deploy your applications, including integration of
dependencies stored in Artifact Registry.
- If App Engine and Artifact Registry are in the same Google Cloud project, the service account has the necessary permissions to download from repositories.
- If App Engine and Artifact Registry are in different projects, you must grant repository access to the service account.
- To provide read-only access for downloading dependencies, grant the Artifact Registry Reader role to the Cloud Build service account.
- If you also use Cloud Build to upload artifacts to repositories, grant the Artifact Registry Writer role to the Cloud Build service account.
Configure access to dependencies
For standard environment applications, see the App Engine standard environment documentation for npm and Python configuration instructions.
To include dependencies in builds you run with Cloud Build, see Integrating with Cloud Build.