Sync with Google Artifact Registry

​

Prerequisites

1. Google Cloud project access:
   • Permissions to access and create registries in Artifact Registry
   • Permissions to create secrets in Google Secret Manager 
   • Artifact Registry API must be enabled in your Google project
2. Access to Docker or Podman to execute an image pull. This may be done locally or within a Google Cloud Shell.

​

Set up a remote repository in Google Cloud

1

Save Minimus token as secret

Save your Minimus token to the Google Secret Manager.

1. Visit the Google Artifact Registry Secret Manager (direct link). 
2. Select + Create secret (top banner):
   
3. Fill in the form:
   1. Name your secret, for example, minimus-image-pull-token-secret.
   2. Secret Value: Paste your Minimus token as the value. 
   3. Configure the rest of the options, including encryption and rotation periods. You can keep the defaults but we recommend that you align with your organizational policies.
   4. Select Create Secret to confirm and save the secret.
   

2

Create a new repository in Artifact Registry

Now that the Minimus token is saved in the Google Secret Manager, you are ready to configure Minimus as a remote repository.

1. Visit the Google Artifact Registry landing page
2. Select + Create repository (top banner):
   
3. Fill in the form:
   1. Name the repository, for example, reg-mini-dev-remote.
   2. Format: Select Docker as the format.
   3. Mode: Select Remote from the available options.
   4. Remote repository source: Select Custom.
   5. Type in https://reg.mini.dev as the custom repository URL.
   

3

Set up authentication

1. Still in the same form, under the section Remote repository authentication mode, select Authenticated.
2. Fill out the form:
   1. Username for the upstream registry: Enter the usernameminimus
   2. Secret: Select the name of the secret created in the previous step. 
   3. Location type: Select Region
   4. Select the region from the list.
   5. Configure the rest of the options, including encryption, cleanup policies, artifact analysis, etc. You can keep the defaults but we recommend that you align with your organizational policies.

4

Save to create the remote repository

Select Create at the bottom of the form. If successful, a success message will appear and you will be able to view the remote repository details.

​

Pulling Minimus images into Artifact Registry

1. Authenticate to Google Cloud Shell from your Google Console. You should see a welcome message such as Welcome to Cloud Shell!....
   
2. Validate that Docker access is configured locally:
   Command template

   Copy

   Ask AI

   #command format
   gcloud auth configure-docker {your-region}
   
   #example
   gcloud auth configure-docker us-central1-docker.pkg.dev
   
   
3. Execute a Docker or Podman pull command:
   Docker Pull Command

   Podman Pull Command

   Copy

   Ask AI

   #docker command format
   docker pull {your registry region}/{google-project-id}/{remote-repository-name}/{desired-minimus-image}
   
   #example
   docker pull us-central1-docker.pkg.dev/acme-project/reg-mini-dev-remote/python:latest
   
   
4. That’s it! You have validated that you can pull Minimus images into your Google Cloud Artifact Registry.