gcloud docker push 403 Forbidden

Question

I am trying to push a docker image to eu.gcr.io and I am getting 403 Forbidden

gcloud docker push  eu.gcr.io/<projectname>/<image>:latest                                                                  
The push refers to a repository [eu.gcr.io/<projectname>/<image>] (len: 1)
663cd9de01fe: Preparing
Post https://eu.gcr.io/v2/w<projectname>/<image>/blobs/uploads/: token auth attempt for registry: https://eu.gcr.io/v2/token?account=_token&scope=repository%3A<projectname>%2F<image>3Apush%2Cpull&service=eu.gcr.io request failed with status: 403 Forbidden

I have checked

curl https://eu.gcr.io/v1/_ping => works
gcloud config list => project id is setup
Storage api is enabled in console
if I use the project name in the url I get 403 Forbidden
if I use the project id in the url I get "Repository does not exist"
gcloud auth list => shows the owner as active
gcloud components update => All components are up to date.

maybe similar or duplicate http://stackoverflow.com/questions/31235586/google-container-registry-access-denied-when-pushing-docker-container — oluies, Jan 19 '16 at 16:30

oluies · Answer 1 · 2016-08-17T15:16:46.823

3

Looks like the problem is that the (local) docker tag was incorrect, the tag was the "project name" instead of "gcloud project id" so by changing the tag to contain the project the push works.

edited Aug 17 '16 at 15:16

answered Jan 19 '16 at 16:37

oluies

17,694
14
74
117

yeah, had the same problem. I scanned over https://cloud.google.com/container-registry/docs/pushing too fast; they really want you to name your local docker containers in a specific format or else you can't push. Also worth noting that the id must be a name, not the number sequence. Once I figured all that out pushing was a-ok haha – Yoshua Wuyts Aug 17 '16 at 15:15

score 3 · Accepted Answer · edited May 23 '17 at 12:16

I had faced the same issue, to resolve it in order I done.

Rename the images as told
Add the user to docker group (important for the docker login)
Use docker login token https://cloud.google.com/container-registry/docs/auth

docker login -e 1234@5678.com -u _token -p "$(gcloud auth print-access-token)" https://gcr.io

(If using sudo docker, the token will be stored with the root account.)

Then use docker push gcr.io/projetc_id/imagename according to How to push a docker image to a private repository

gcloud docker push 403 Forbidden

2 Answers2

Linked