command not found: docker-credential-gcr about docker-credential-gcr

[dekkagaijin]

Ah, yeah, the Homebrew package is an unsupported community effort.

I'd try removing the brew version and using the supported installation: https://cloud.google.com/sdk/docs/quickstart-macos

[dekkagaijin]

Did you install gcloud in the same session? You might have to restart your terminal before gcloud's component bin directory gets included on your system PATH

[steveoh]

I installed gcloud with brew and then tried to install this cli. Restarted session etc and its still not on path.

[steveoh]

thanks! That worked.

Edited

I'll open an issue in the brew repo since that was the problem. Or how the gcloud cli installed the docker-credential-gcr after the brew install.

I can open a new issue but I'm now confused. I have a few #images in the gcr.

I ran docker-credential-gcr configure-docker, docker-credential-gcr gcr-login

I then deleted my k8s deployment and recreated it. But I get permission issues (ImagePullBackOff).

unauthorized: You don't have the needed permissions to perform this operation, and you may have invalid credentials. To authenticate your request, follow the steps in: https://cloud.google.com/container-registry/docs/advanced-authentication

This puts me back where I started.

The pods started ok when the gcr was public but we want to keep it private. Are there some specific steps I'm missing or permissions I need to add to allow k8s to pull on my behalf?

I am logged into gcloud. I have our specific project set.

[dekkagaijin]

Are you using GKE? If so, you'll need to make sure that the nodes' service account has the Storage Object Viewer role in the project where your images are hosted, and that its configured with Storage reader scopes when the cluster is created (both the service account and the scopes can be seen in the advanced options during cluster creation in the cloud console).

Otherwise, you'll have to give your cluster ImagePullSecrets: http://docs.heptio.com/content/private-registries/pr-gcr.html

[steveoh]

thanks the second option in that doc worked great!