diff --git a/infra/gcp/ensure-e2e-projects.sh b/infra/gcp/ensure-e2e-projects.sh
index 93316e7e81c..69c8c0988c0 100755
--- a/infra/gcp/ensure-e2e-projects.sh
+++ b/infra/gcp/ensure-e2e-projects.sh
@@ -122,6 +122,7 @@ for prj; do
     enable_api "${prj}" logging.googleapis.com
     enable_api "${prj}" monitoring.googleapis.com
     enable_api "${prj}" storage-component.googleapis.com
+    enable_api "${prj}" containerregistry.googleapis.com
 
     color 6 "Empower prow-build service account to edit e2e project: ${prj}"
     # TODO: this is what prow.k8s.io uses today, but it is likely over-permissioned, we could