Google Container Registry (GCR) Scan failing with "Forbidden" Error in Prisma Cloud
1905
Created On 09/14/22 01:51 AM - Last Modified 05/11/23 07:33 AM
Symptom
Google Container Registry (GCR) Scan failing with "Forbidden" Error in Prisma Cloud.
Prisma Cloud Defender Logs
scanner.go:308 failed to retrieve repository, error Get "<URL>": Forbidden
Prisma Cloud Console
Environment
- Prisma Cloud
- Google Container Registry (GCR)
Cause
- Even though 'No Proxy' has been configured, all requests still routed through proxy.
Resolution
- Bypass Proxy for GCR URL storageapis.google.com in Compute Console by going to: Manage > System > Proxy > No proxy (example shown below for Prisma Cloud Compute Edition)
NOTE: If multiple URLs are configured to bypass Proxy, configure them as URL1, URL2, URL3 (space after comma) etc instead of URL1,URL2,URL3 (no space after comma).
Additional Information
Another possible reason for this error is:
- Insufficient Admin Privileges.