I think one thing to try is to create an explicit docker provider (e.g.

pulumi.docker.Provider()

with

registryAuth

) and pass that to your

new docker.RemoteImage(...,{},{provider: gcrDockerProvider})

.

registryAuth

filled out like in your Terraform link should provide the necessary authentication for the Docker provider/daemon to connect to GCR correctly.

Here's an example. I can successfully

pulumi up

this, but not sure if this is the full use case you're trying.

i'm trying this out

@gentle-diamond-70147 this seems like it should work, but its unclear how to get this to work with

docker.getRegistryImage

it doesn't accept a provider parameter

looks like we're getting somewhere

Synchronous call made to "docker:index/getRegistryImage:getRegistryImage" with an unregistered provider. This is now deprecated and may cause the program to hang.
    For more details see: <https://www.pulumi.com/docs/troubleshooting/#synchronous-call>