Denied: Token exchange failed for project ... Caller does not have permission 'storage.buckets.get'

denied: Token exchange failed for project 'your-project'. Caller does not have permission 'storage.buckets.get'. To configure permissions, follow instructions at: https://cloud.google.com/container-registry/docs/access-control

• Pull -> roles/storage.objectViewer
• Push -> roles/storage.legacyBucketWriter Grant the role on the registry storage bucket. This permission is only available at the bucket level, you cannot grant it at the project level.
• Add registry hosts -> roles/storage.admin

Permissions

• Bucket name: eu.artifacts.your-project.appspot.com

Related

• docker push
• Container registry
• Storage Admin

See also

• Google Cloud Registry (GCR), gcr.io
• Container Registry: JFrog Container Registry, AWS ECR, Azure container registry, VMware Harbor Registry, Google Cloud Registry, Amazon Elastic Container Registry (ECR), GitLab container registry, crane, gcr.io, ghcr.io