A service account in GCP can only have up to 10 keys assigned. With this we reach our paralel openqa jobs quite fast. To have more keys available, we create 4 service accounts and select randomly one. If this fails, the next call of get_next_vault_role() will retrieve the next.


Get the full registry prefix URL for any containers image registry of ECR based on the account and region


Get the full name for a container image in ECR registry


Configure the podman to access the cloud provider registry