I've inherited a system where we have a gitlab Docker image registry hosted in GCP, but it's behind an IAP proxy so I can do a docker pull while connected to our internal network (thanks to firewall rules that bypass the IAP proxy).

Is there any way to do a docker pull against it from the internet? I suspect I need a plugin for docker login to make it IAP aware.

Has anyone done this before?