Denied: Token exchange failed for project ... Caller does not have permission 'storage.buckets.get'

denied: Token exchange failed for project 'your-project'. Caller does not have permission 'storage.buckets.get'. To configure permissions, follow instructions at: https://cloud.google.com/container-registry/docs/access-control

• Pull -> roles/storage.objectViewer
• Push -> roles/storage.legacyBucketWriter
• Add registry hosts -> roles/storage.admin

Related

• docker push
• Container registry

See also

• Google Cloud Registry (GCR), gcr.io
• Container Registry: JFrog Container Registry, AWS ECR, Azure container registry, VMware Harbor Registry, Google Cloud Registry, Amazon Elastic Container Registry (ECR), GitLab container registry, crane, gcr.io, ghcr.io