Google Container Registry

Once an image has successfully built, it will be stored in the Google Container Registry. Container Registry is a managed private Docker image registry. When debugging a service running in the flexible environment, it can sometimes be useful to pull the service image from the registry to run locally.

To view App Engine images in the Cloud Console, navigate to Navigation menu | Container Registry | Images. App Engine images are stored in the appengine folder. Once the desired image is identified, click SHOW PULL COMMAND for the gcloud command to pull the image. The image can be pulled to a local machine or the cloud shell.

Container Registry is backed by Cloud Storage buckets, so access is controlled through Cloud Storage IAM permissions. Viewing and pulling images requires the Storage Object Viewer role, while pushing and deleting images requires the Storage Admin role.