What an account or token can push into Docker registry?

Hi!

Struggling with RW denial for Docker Registry - how to push an image into project’s Docker registry. Getting:
denied: requested access to the resource is denied

Even with my personal account or Gitlab’s root account.

Have read about personal API tokens, about RO Deploy tokens, saw https://gitlab.com/gitlab-org/gitlab-ce/issues/47828 and so on with googling all the things.

What’s wrong, or where it should be set up???
What an account or token should be used for docker push???

root@runner-01:/# docker login -u bot_api_token head:5555
Password: 
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded


root@runner-01:/# docker push head:5555/bt-prj/img-m:latest
The push refers to repository [head:5555/bt-prj/img-m]
ece42be9cbb5: Preparing 
denied: requested access to the resource is denied

Also tried in CI Yaml another login way - all successfull, but push denied:

  • docker login -u $CI_DEPLOY_USER -p $CI_DEPLOY_PASSWORD $CI_REGISTRY
  • docker login -u $CI_DEPLOY_USER -p $CI_DEPLOY_PASSWORD head:5555
  • docker login -u gitlab-ci-token -p $CI_JOB_TOKEN head:5555
  • docker login -u bot-user-login -p $CI_DEPLOY_PASSWORD head:5555

No luck.

Thank you!

P.S. The software is
gitlab/gitlab-ce:11.7.10-ce.0
gitlab/gitlab-runner:v11.7.0

The message states there is no such the repo. In fact.