mirror of
https://github.com/google/nomulus
synced 2025-12-23 14:25:44 +00:00
Per https://cloud.google.com/container-registry/docs/access-control#granting_users_and_other_projects_access_to_a_registry, for a service account to access GCR, it does not need reader access to *all* buckets in a project, but just the specific one. This is duped from cl/254092941.