Connecting to Google Container Registry from Jenkins workers

I'm working on running Portable Python Load tests on our existing Flink Dataproc infrastructure. To run the tests on the freshest version of SDK harnesses and Job servers, I want to be able to push/pull those images to/from Google Container Registry in apache-beam-testing project. However, I can't connect to the registry - I got the following error message while pushing the images:
 

unauthorized: You don't have the needed permissions to perform this operation, and you may have invalid credentials. To authenticate your request, follow the steps in: https://cloud.google.com/container-registry/docs/advanced-authentication 

 
(see more here: https://builds.apache.org/job/beam_LoadTests_Python_GBK_Flink_Batch_PR/5/console )
 
From what I know, the best way to deal with this is to install the standalone docker credential helper on workers. It would then provide possibility to authenticate every time Jenkins jobs need to push/pull images. 

I seem to not have permissions to install this tool on workers - if my reasoning is correct, can we install this?

I specifically mean running this:

gcloud components install docker-credential-gcr