Artifactory and Google Artifact Registry Integration

Google Cloud services like Cloud Run and Vertex AI can only pull container images from Google Artifact Registry or Docker Hub, they have no way to pull directly from JFrog. For joint JFrog and Google Cloud customers who wish to use Artifactory as their single source of truth for container images, this has meant duplicating images into Google Artifact Registry just to satisfy these services and losing governance and traceability over that part of their pipeline.

The new Connector repository type closes that gap. A Connector acts as a pass-through link between Google Artifact Registry and Artifactory. Cloud Run and Vertex AI pull through Google Artifact Registry as they normally would, while the underlying image continues to live and be governed in Artifactory. There is no duplication or separate copy to keep in sync. This lets customers keep JFrog as the single source of truth for their container images while still meeting Google Cloud services where they already expect to pull from.

To perform the integration:

1. Create a secret according to one of the following options:

   • Recommended: Create an auto-rotating secret according to the instructions in the JFrog GCP Secret Rotator repository.

   • Create a simple secret as follows:

     1. In Google Cloud, open the Secret Manager and click Create secret. The Create secret screen appears, as shown below.

        

     2. Enter a name for the secret.

     3. In Secret Value, enter your JFrog access token or password.

        📘

        Note:

        JFrog recommends entering here a least-privileged access token with read-only access to the Docker repository.

     4. Click Create secret.

2. In Google Cloud, go to your project and then to Artifact Registry.
3. In Artifact Registry, select Create Repository. The Create Repository window opens, as shown below.

7. Assign a name to the repository.

8. From the Format dropdown, choose Docker.

9. For Mode, choose Connector.

10. For Connector repository source choose Custom, and add the path to your Docker repository that you want to connect to Artifactory in the Custom registry field. The path must include https:// and the repository path. For example:

    https://this-is-my-name.jfrog.io/docker

11. At Username for the upstream registry, enter a username.

12. At Store your credentials, select the name of the secret you prepared at step 1 from the dropdown.

13. Click Create.

For more information, see:

• Google Artifact Registry Connector repositories overview
• Create Google Artifact Registry connector repositories