diff --git a/charts/model-engine/values_sample.yaml b/charts/model-engine/values_sample.yaml
index f7e1fe58d..4fd1b741d 100644
--- a/charts/model-engine/values_sample.yaml
+++ b/charts/model-engine/values_sample.yaml
@@ -157,7 +157,7 @@ serviceTemplate:
 config:
   values:
     infra:
-      # cloud_provider [required]; either "aws" or "azure"
+      # cloud_provider [required]; either "aws", "azure", or "gcp"
       cloud_provider: aws
       # k8s_cluster_name [required] is the name of the k8s cluster
       k8s_cluster_name: main_cluster
@@ -165,9 +165,9 @@ config:
       dns_host_domain: llm-engine.domain.com
       # default_region [required] is the default AWS region for various resources (e.g ECR)
       default_region: us-east-1
-      # aws_account_id [required] is the AWS account ID for various resources (e.g ECR)
+      # ml_account_id [required] is the AWS account ID for various resources (e.g ECR) if cloud_provider is "aws", and the GCP project ID if cloud_provider is "gcp"
       ml_account_id: "000000000000"
-      # docker_repo_prefix [required] is the prefix for AWS ECR repositories
+      # docker_repo_prefix [required] is the prefix for AWS ECR repositories, GCP Artifact Registry repositories, or Azure Container Registry repositories
       docker_repo_prefix: "000000000000.dkr.ecr.us-east-1.amazonaws.com"
       # redis_host [required if redis_aws_secret_name not present] is the hostname of the redis cluster you wish to connect
       redis_host: llm-engine-prod-cache.use1.cache.amazonaws.com
diff --git a/model-engine/README.md b/model-engine/README.md
index 3f6b9579d..311b8b667 100644
--- a/model-engine/README.md
+++ b/model-engine/README.md
@@ -42,8 +42,13 @@ Run `mypy . --install-types` to set up mypy.
 Most of the business logic in Model Engine should contain unit tests, located in
 [`tests/unit`](./tests/unit). To run the tests, run `pytest`.
 
+## Building Docker Images
+
+In order to build docker images, you must change directories into the llm-engine repository root and then run
+`docker build -f model-engine/Dockerfile .`
+
 ## Generating OpenAI types
 We've decided to make our V2 APIs OpenAI compatible. We generate the
 corresponding Pydantic models:
 1. Fetch the OpenAPI spec from https://github.com/openai/openai-openapi/blob/master/openapi.yaml
-2. Run scripts/generate-openai-types.sh
+2. Run scripts/generate-openai-types.sh
\ No newline at end of file
diff --git a/model-engine/model_engine_server/api/dependencies.py b/model-engine/model_engine_server/api/dependencies.py
index e120fbf0b..df2483ed4 100644
--- a/model-engine/model_engine_server/api/dependencies.py
+++ b/model-engine/model_engine_server/api/dependencies.py
@@ -110,6 +110,7 @@
     DbTriggerRepository,
     ECRDockerRepository,
     FakeDockerRepository,
+    GCPArtifactRegistryDockerRepository,
     LiveTokenizerRepository,
     LLMFineTuneRepository,
     RedisModelEndpointCacheRepository,
@@ -226,6 +227,10 @@ def _get_external_interfaces(
     elif infra_config().cloud_provider == "azure":
         inference_task_queue_gateway = servicebus_task_queue_gateway
         infra_task_queue_gateway = servicebus_task_queue_gateway
+    elif infra_config().cloud_provider == "gcp":
+        # we use redis for gcp (instead of using servicebus or the like)
+        inference_task_queue_gateway = redis_24h_task_queue_gateway
+        infra_task_queue_gateway = redis_task_queue_gateway
     else:
         inference_task_queue_gateway = sqs_task_queue_gateway
         infra_task_queue_gateway = sqs_task_queue_gateway
@@ -345,6 +350,12 @@ def _get_external_interfaces(
         docker_repository = FakeDockerRepository()
     elif infra_config().docker_repo_prefix.endswith("azurecr.io"):
         docker_repository = ACRDockerRepository()
+    elif "pkg.dev" in infra_config().docker_repo_prefix:
+        assert (
+            infra_config().docker_repo_prefix
+            == f"{infra_config().default_region}-docker.pkg.dev/{infra_config().ml_account_id}"  # this stores the gcp project id (when cloud_provider is gcp)
+        )
+        docker_repository = GCPArtifactRegistryDockerRepository()
     else:
         docker_repository = ECRDockerRepository()
 
@@ -387,7 +398,8 @@ def get_default_external_interfaces() -> ExternalInterfaces:
 
 def get_default_external_interfaces_read_only() -> ExternalInterfaces:
     session = async_scoped_session(
-        get_session_read_only_async(), scopefunc=asyncio.current_task  # type: ignore
+        get_session_read_only_async(),
+        scopefunc=asyncio.current_task,  # type: ignore
     )
     return _get_external_interfaces(read_only=True, session=session)
 
diff --git a/model-engine/model_engine_server/common/config.py b/model-engine/model_engine_server/common/config.py
index 532ead21a..9aad976b7 100644
--- a/model-engine/model_engine_server/common/config.py
+++ b/model-engine/model_engine_server/common/config.py
@@ -70,12 +70,14 @@ class HostedModelInferenceServiceConfig:
     user_inference_tensorflow_repository: str
     docker_image_layer_cache_repository: str
     sensitive_log_mode: bool
-    # Exactly one of the following three must be specified
+    # Exactly one of the following four must be specified
     cache_redis_aws_url: Optional[str] = None  # also using this to store sync autoscaling metrics
     cache_redis_azure_host: Optional[str] = None
     cache_redis_aws_secret_name: Optional[str] = (
         None  # Not an env var because the redis cache info is already here
     )
+    cache_redis_gcp_host: Optional[str] = None
+
     sglang_repository: Optional[str] = None
 
     @classmethod
@@ -103,6 +105,9 @@ def cache_redis_url(self) -> str:
             ), "cache_redis_aws_secret_name is only for AWS"
             creds = get_key_file(self.cache_redis_aws_secret_name)  # Use default role
             return creds["cache-url"]
+        elif self.cache_redis_gcp_host:
+            assert infra_config().cloud_provider == "gcp"
+            return f"rediss://{self.cache_redis_gcp_host}"
 
         assert self.cache_redis_azure_host and infra_config().cloud_provider == "azure"
         username = os.getenv("AZURE_OBJECT_ID")
diff --git a/model-engine/model_engine_server/common/dtos/model_endpoints.py b/model-engine/model_engine_server/common/dtos/model_endpoints.py
index 36a7c7f68..72aec7369 100644
--- a/model-engine/model_engine_server/common/dtos/model_endpoints.py
+++ b/model-engine/model_engine_server/common/dtos/model_endpoints.py
@@ -43,6 +43,7 @@ class BrokerName(str, Enum):
     """
 
     REDIS = "redis-message-broker-master"
+    REDIS_GCP = "redis-gcp-memorystore-message-broker-master"
     SQS = "sqs-message-broker-master"
     SERVICEBUS = "servicebus-message-broker-master"
 
diff --git a/model-engine/model_engine_server/core/celery/__init__.py b/model-engine/model_engine_server/core/celery/__init__.py
index 3368bc698..fab7ab0db 100644
--- a/model-engine/model_engine_server/core/celery/__init__.py
+++ b/model-engine/model_engine_server/core/celery/__init__.py
@@ -5,12 +5,14 @@
     TaskVisibility,
     celery_app,
     get_all_db_indexes,
+    get_default_backend_protocol,
     get_redis_host_port,
     inspect_app,
 )
 
 __all__: Sequence[str] = (
     "celery_app",
+    "get_default_backend_protocol",
     "get_all_db_indexes",
     "get_redis_host_port",
     "inspect_app",
diff --git a/model-engine/model_engine_server/core/celery/app.py b/model-engine/model_engine_server/core/celery/app.py
index af7790d1e..18b8531f8 100644
--- a/model-engine/model_engine_server/core/celery/app.py
+++ b/model-engine/model_engine_server/core/celery/app.py
@@ -116,9 +116,7 @@ def seconds_to_visibility(timeout: int) -> "TaskVisibility":
     @staticmethod
     def from_name(name: str) -> "TaskVisibility":
         # pylint: disable=no-member,protected-access
-        lookup = {
-            x.name: x.value for x in TaskVisibility._value2member_map_.values()
-        }  # type: ignore
+        lookup = {x.name: x.value for x in TaskVisibility._value2member_map_.values()}  # type: ignore
         return TaskVisibility(lookup[name.upper()])
 
 
@@ -595,3 +593,13 @@ async def get_num_unclaimed_tasks_async(
     if redis_instance is None:
         await _redis_instance.close()  # type: ignore
     return num_unclaimed
+
+
+def get_default_backend_protocol():
+    logger.info("CLOUD PROVIDER: %s", infra_config().cloud_provider)
+    if infra_config().cloud_provider == "azure":
+        return "abs"
+    elif infra_config().cloud_provider == "gcp":
+        return "redis"  # TODO gcp: replace with cloud storage
+    else:
+        return "s3"
diff --git a/model-engine/model_engine_server/core/celery/celery_autoscaler.py b/model-engine/model_engine_server/core/celery/celery_autoscaler.py
index 1b74f279b..d6d4e3e16 100644
--- a/model-engine/model_engine_server/core/celery/celery_autoscaler.py
+++ b/model-engine/model_engine_server/core/celery/celery_autoscaler.py
@@ -45,6 +45,7 @@ def excluded_namespaces():
 ELASTICACHE_REDIS_BROKER = "redis-elasticache-message-broker-master"
 SQS_BROKER = "sqs-message-broker-master"
 SERVICEBUS_BROKER = "servicebus-message-broker-master"
+GCP_REDIS_BROKER = "redis-gcp-memorystore-message-broker-master"
 
 UPDATE_DEPLOYMENT_MAX_RETRIES = 10
 
@@ -588,6 +589,7 @@ async def main():
         ELASTICACHE_REDIS_BROKER: RedisBroker(use_elasticache=True),
         SQS_BROKER: SQSBroker(),
         SERVICEBUS_BROKER: ASBBroker(),
+        GCP_REDIS_BROKER: RedisBroker(use_elasticache=False),
     }
 
     broker = BROKER_NAME_TO_CLASS[autoscaler_broker]
@@ -598,10 +600,18 @@ async def main():
     )
 
     if broker_type == "redis":
+        # TODO gcp: change this to use cloud storage
+        # NOTE: the infra config is not available in the autoscaler (for some reason), so we have
+        # to use the autoscaler_broker to determine the infra.
+        backend_protocol = "redis" if "gcp" in autoscaler_broker else "s3"
         inspect = {
             db_index: inspect_app(
                 app=celery_app(
-                    None, broker_type=broker_type, task_visibility=db_index, aws_role=aws_profile
+                    None,
+                    broker_type=broker_type,
+                    task_visibility=db_index,
+                    aws_role=aws_profile,
+                    backend_protocol=backend_protocol,
                 )
             )
             for db_index in get_all_db_indexes()
diff --git a/model-engine/model_engine_server/core/config.py b/model-engine/model_engine_server/core/config.py
index 0474976c0..832e044e2 100644
--- a/model-engine/model_engine_server/core/config.py
+++ b/model-engine/model_engine_server/core/config.py
@@ -38,7 +38,7 @@ class _InfraConfig:
     k8s_cluster_name: str
     dns_host_domain: str
     default_region: str
-    ml_account_id: str
+    ml_account_id: str  # NOTE: this stores the aws account id if cloud_provider is aws, and the gcp project id if cloud_provider is gcpFgc
     docker_repo_prefix: str
     s3_bucket: str
     redis_host: Optional[str] = None
diff --git a/model-engine/model_engine_server/db/base.py b/model-engine/model_engine_server/db/base.py
index 5033d8ada..89e8fb263 100644
--- a/model-engine/model_engine_server/db/base.py
+++ b/model-engine/model_engine_server/db/base.py
@@ -1,3 +1,4 @@
+import json
 import os
 import sys
 import time
@@ -7,6 +8,7 @@
 import sqlalchemy
 from azure.identity import DefaultAzureCredential
 from azure.keyvault.secrets import SecretClient
+from google.cloud.secretmanager_v1 import SecretManagerServiceClient
 from model_engine_server.core.aws.secrets import get_key_file
 from model_engine_server.core.config import InfraConfig, infra_config
 from model_engine_server.core.loggers import logger_name, make_logger
@@ -20,8 +22,12 @@
 
 
 def get_key_file_name(environment: str) -> str:
-    if infra_config().cloud_provider == "azure":
+    # azure and gcp don't support "/" in the key file secret name
+    # so we use dashes
+    if infra_config().cloud_provider == "azure" or infra_config().cloud_provider == "gcp":
         return f"{environment}-ml-infra-pg".replace("training", "prod").replace("-new", "")
+
+    # aws does support "/" in the key file secret name
     return f"{environment}/ml_infra_pg".replace("training", "prod").replace("-new", "")
 
 
@@ -60,11 +66,11 @@ def get_engine_url(
         logger.debug(f"Using key file {key_file}")
 
         if infra_config().cloud_provider == "azure":
-            client = SecretClient(
+            az_secret_client = SecretClient(
                 vault_url=f"https://{os.environ.get('KEYVAULT_NAME')}.vault.azure.net",
                 credential=DefaultAzureCredential(),
             )
-            db = client.get_secret(key_file).value
+            db = az_secret_client.get_secret(key_file).value
             user = os.environ.get("AZURE_IDENTITY_NAME")
             token = DefaultAzureCredential().get_token(
                 "https://ossrdbms-aad.database.windows.net/.default"
@@ -76,6 +82,26 @@ def get_engine_url(
             # for recommendations on how to work with rotating auth credentials
             engine_url = f"postgresql://{user}:{password}@{db}?sslmode=require"
             expiry_in_sec = token.expires_on
+        elif infra_config().cloud_provider == "gcp":
+            gcp_secret_manager_client = (
+                SecretManagerServiceClient()
+            )  # uses application default credentials (see: https://cloud.google.com/secret-manager/docs/reference/libraries#client-libraries-usage-python)
+            secret_version = gcp_secret_manager_client.access_secret_version(
+                request={
+                    "name": f"projects/{infra_config().ml_account_id}/secrets/{key_file}/versions/latest"
+                }
+            )
+            creds = json.loads(secret_version.payload.data.decode("utf-8"))
+
+            user = creds.get("username")
+            password = creds.get("password")
+            host = creds.get("host")
+            port = str(creds.get("port"))
+            dbname = creds.get("dbname")
+
+            logger.info(f"Connecting to db {host}:{port}, name {dbname}")
+
+            engine_url = f"postgresql://{user}:{password}@{host}:{port}/{dbname}"
         else:
             db_secret_aws_profile = os.environ.get("DB_SECRET_AWS_PROFILE")
             creds = get_key_file(key_file, db_secret_aws_profile)
diff --git a/model-engine/model_engine_server/infra/gateways/celery_task_queue_gateway.py b/model-engine/model_engine_server/infra/gateways/celery_task_queue_gateway.py
index a1b761f07..f31702ea5 100644
--- a/model-engine/model_engine_server/infra/gateways/celery_task_queue_gateway.py
+++ b/model-engine/model_engine_server/infra/gateways/celery_task_queue_gateway.py
@@ -7,14 +7,15 @@
     GetAsyncTaskV1Response,
     TaskStatus,
 )
-from model_engine_server.core.celery import TaskVisibility, celery_app
+from model_engine_server.core.celery import TaskVisibility, celery_app, get_default_backend_protocol
 from model_engine_server.core.config import infra_config
 from model_engine_server.core.loggers import logger_name, make_logger
 from model_engine_server.domain.exceptions import InvalidRequestException
 from model_engine_server.domain.gateways.task_queue_gateway import TaskQueueGateway
 
 logger = make_logger(logger_name())
-backend_protocol = "abs" if infra_config().cloud_provider == "azure" else "s3"
+
+backend_protocol = get_default_backend_protocol()
 
 celery_redis = celery_app(
     None,
diff --git a/model-engine/model_engine_server/infra/gateways/resources/k8s_resource_types.py b/model-engine/model_engine_server/infra/gateways/resources/k8s_resource_types.py
index 96d5fbb4d..24c51ad09 100644
--- a/model-engine/model_engine_server/infra/gateways/resources/k8s_resource_types.py
+++ b/model-engine/model_engine_server/infra/gateways/resources/k8s_resource_types.py
@@ -553,10 +553,13 @@ def get_endpoint_resource_arguments_from_request(
 
     image_hash = compute_image_hash(request.image)
 
-    # In Circle CI, we use Redis on localhost instead of SQS
+    # In Circle CI/GCP, we use Redis on localhost instead of SQS
     if CIRCLECI:
         broker_name = BrokerName.REDIS.value
         broker_type = BrokerType.REDIS.value
+    elif infra_config().cloud_provider == "gcp":
+        broker_name = BrokerName.REDIS_GCP.value
+        broker_type = BrokerType.REDIS.value
     elif infra_config().cloud_provider == "azure":
         broker_name = BrokerName.SERVICEBUS.value
         broker_type = BrokerType.SERVICEBUS.value
@@ -576,6 +579,7 @@ def get_endpoint_resource_arguments_from_request(
     abs_account_name = os.getenv("ABS_ACCOUNT_NAME")
     if abs_account_name is not None:
         main_env.append({"name": "ABS_ACCOUNT_NAME", "value": abs_account_name})
+    # TODO: what should we add here
 
     # LeaderWorkerSet exclusive
     worker_env = None
diff --git a/model-engine/model_engine_server/infra/repositories/__init__.py b/model-engine/model_engine_server/infra/repositories/__init__.py
index f14cf69f7..8d113a724 100644
--- a/model-engine/model_engine_server/infra/repositories/__init__.py
+++ b/model-engine/model_engine_server/infra/repositories/__init__.py
@@ -12,6 +12,7 @@
 from .ecr_docker_repository import ECRDockerRepository
 from .fake_docker_repository import FakeDockerRepository
 from .feature_flag_repository import FeatureFlagRepository
+from .gcp_artifact_registry_docker_repository import GCPArtifactRegistryDockerRepository
 from .live_tokenizer_repository import LiveTokenizerRepository
 from .llm_fine_tune_repository import LLMFineTuneRepository
 from .model_endpoint_cache_repository import ModelEndpointCacheRepository
@@ -42,4 +43,5 @@
     "RedisModelEndpointCacheRepository",
     "S3FileLLMFineTuneRepository",
     "S3FileLLMFineTuneEventsRepository",
+    "GCPArtifactRegistryDockerRepository",
 ]
diff --git a/model-engine/model_engine_server/infra/repositories/gcp_artifact_registry_docker_repository.py b/model-engine/model_engine_server/infra/repositories/gcp_artifact_registry_docker_repository.py
new file mode 100644
index 000000000..bd30ef7e3
--- /dev/null
+++ b/model-engine/model_engine_server/infra/repositories/gcp_artifact_registry_docker_repository.py
@@ -0,0 +1,70 @@
+from typing import Optional
+
+from google.api_core.client_options import ClientOptions
+from google.api_core.exceptions import NotFound
+from google.cloud import artifactregistry_v1 as artifactregistry
+from model_engine_server.common.dtos.docker_repository import BuildImageRequest, BuildImageResponse
+from model_engine_server.core.config import infra_config
+from model_engine_server.core.loggers import logger_name, make_logger
+from model_engine_server.domain.exceptions import DockerRepositoryNotFoundException
+from model_engine_server.domain.repositories import DockerRepository
+
+logger = make_logger(logger_name())
+
+
+class GCPArtifactRegistryDockerRepository(DockerRepository):
+    def _get_client(self):
+        client = artifactregistry.ArtifactRegistryClient(
+            client_options=ClientOptions()
+            # NOTE: uses default auth credentials for GCP. Read `google.auth.default` function for more details
+        )
+        return client
+
+    def _get_repository_prefix(self) -> str:
+        # GCP is verbose and so has a long prefix for the repository
+        return f"projects/{infra_config().ml_account_id}/locations/{infra_config().default_region}/repositories"
+
+    def image_exists(
+        self, image_tag: str, repository_name: str, aws_profile: Optional[str] = None
+    ) -> bool:
+        client = self._get_client()
+
+        try:
+            client.get_docker_image(
+                artifactregistry.GetDockerImageRequest(
+                    # This is the google cloud naming convention: https://cloud.google.com/artifact-registry/docs/docker/names
+                    name=f"{self._get_repository_prefix()}/{repository_name}/dockerImages/{image_tag}"
+                )
+            )
+        except NotFound:
+            return False
+        return True
+
+    def get_image_url(self, image_tag: str, repository_name: str) -> str:
+        return f"{infra_config().docker_repo_prefix}/{repository_name}:{image_tag}"
+
+    def build_image(self, image_params: BuildImageRequest) -> BuildImageResponse:
+        raise NotImplementedError("GCP image build not supported yet")
+
+    def get_latest_image_tag(self, repository_name: str) -> str:
+        client = self._get_client()
+        parent = f"{self._get_repository_prefix()}/{repository_name}"
+        try:
+            images_pager = client.list_docker_images(
+                artifactregistry.ListDockerImagesRequest(
+                    parent=parent,
+                    order_by="update_time_desc",  # NOTE: we expect that the artifact registry is immutable, so there should not be any updates after upload
+                    page_size=1,
+                )
+            )
+
+            docker_image_page = next(images_pager.pages, None)
+            if docker_image_page is None:
+                raise DockerRepositoryNotFoundException
+            if (
+                len(docker_image_page.docker_images) == 0
+            ):  # This condition shouldn't happen since we're asking for 1 image per page
+                raise DockerRepositoryNotFoundException
+            return docker_image_page.docker_images[0].tags[0]
+        except NotFound:
+            raise DockerRepositoryNotFoundException
diff --git a/model-engine/model_engine_server/service_builder/celery.py b/model-engine/model_engine_server/service_builder/celery.py
index 06384c9e4..4de6b8ec4 100644
--- a/model-engine/model_engine_server/service_builder/celery.py
+++ b/model-engine/model_engine_server/service_builder/celery.py
@@ -1,6 +1,6 @@
 from model_engine_server.common.dtos.model_endpoints import BrokerType
 from model_engine_server.common.env_vars import CIRCLECI
-from model_engine_server.core.celery import celery_app
+from model_engine_server.core.celery import celery_app, get_default_backend_protocol
 from model_engine_server.core.config import infra_config
 
 service_builder_broker_type: str
@@ -8,9 +8,12 @@
     service_builder_broker_type = str(BrokerType.REDIS.value)
 elif infra_config().cloud_provider == "azure":
     service_builder_broker_type = str(BrokerType.SERVICEBUS.value)
+elif infra_config().cloud_provider == "gcp":
+    service_builder_broker_type = str(BrokerType.REDIS.value)
 else:
     service_builder_broker_type = str(BrokerType.SQS.value)
 
+
 service_builder_service = celery_app(
     name="model_engine_server.service_builder",
     modules=[
@@ -18,7 +21,7 @@
     ],
     s3_bucket=infra_config().s3_bucket,
     broker_type=service_builder_broker_type,
-    backend_protocol="abs" if infra_config().cloud_provider == "azure" else "s3",
+    backend_protocol=get_default_backend_protocol(),
 )
 
 if __name__ == "__main__":
diff --git a/model-engine/requirements.in b/model-engine/requirements.in
index d503f7b83..37980bebc 100644
--- a/model-engine/requirements.in
+++ b/model-engine/requirements.in
@@ -5,6 +5,7 @@ aioredis~=2.0
 alembic==1.8.1
 asyncpg==0.27.0
 azure-containerregistry~=1.2.0
+protobuf~=4.21
 azure-identity~=1.15.0
 azure-keyvault-secrets~=4.7.0
 azure-servicebus~=7.11.4
@@ -33,7 +34,6 @@ kubeconfig~=1.1
 kubernetes-asyncio==25.11.0
 kubernetes~=25.3.0
 orjson==3.9.15
-protobuf~=3.20
 psycopg2-binary==2.9.3
 py-xid==0.3.0
 pycurl~=7.44  # For celery[sqs]
@@ -59,4 +59,6 @@ transformers==4.38.0
 twine==3.7.1
 uvicorn==0.30.6
 uvloop==0.17.0
-yarl~=1.4
\ No newline at end of file
+yarl~=1.4
+google-cloud-artifact-registry~=1.14
+google-cloud-secret-manager~=2.22
\ No newline at end of file
diff --git a/model-engine/requirements.txt b/model-engine/requirements.txt
index 6e784ecc9..788ed0cb6 100644
--- a/model-engine/requirements.txt
+++ b/model-engine/requirements.txt
@@ -1,5 +1,5 @@
 #
-# This file is autogenerated by pip-compile with Python 3.10
+# This file is autogenerated by pip-compile with Python 3.11
 # by the following command:
 #
 #    pip-compile --allow-unsafe --index-url=https://pypi.org/simple --no-emit-index-url --no-emit-trusted-host model-engine/requirements.in
@@ -28,10 +28,7 @@ anyio==3.7.1
 asn1crypto==1.5.1
     # via scramp
 async-timeout==4.0.2
-    # via
-    #   aiohttp
-    #   aioredis
-    #   redis
+    # via aioredis
 asyncpg==0.27.0
     # via -r model-engine/requirements.in
 attrs==23.1.0
@@ -132,7 +129,6 @@ cryptography==42.0.5
     #   azure-storage-blob
     #   msal
     #   pyjwt
-    #   secretstorage
 dataclasses-json==0.5.9
     # via -r model-engine/requirements.in
 datadog==0.47.0
@@ -151,10 +147,6 @@ docutils==0.20.1
     # via readme-renderer
 envier==0.4.0
     # via ddtrace
-exceptiongroup==1.2.0
-    # via
-    #   anyio
-    #   cattrs
 fastapi==0.110.0
     # via -r model-engine/requirements.in
 filelock==3.13.1
@@ -173,10 +165,39 @@ gitdb2==2.0.6
     # via -r model-engine/requirements.in
 gitpython==3.1.41
     # via -r model-engine/requirements.in
+google-api-core[grpc]==2.24.1
+    # via
+    #   google-cloud-artifact-registry
+    #   google-cloud-secret-manager
 google-auth==2.21.0
-    # via kubernetes
+    # via
+    #   google-api-core
+    #   google-cloud-artifact-registry
+    #   google-cloud-secret-manager
+    #   kubernetes
+google-cloud-artifact-registry==1.14.0
+    # via -r model-engine/requirements.in
+google-cloud-secret-manager==2.22.1
+    # via -r model-engine/requirements.in
+googleapis-common-protos[grpc]==1.66.0
+    # via
+    #   google-api-core
+    #   grpc-google-iam-v1
+    #   grpcio-status
 greenlet==2.0.2
     # via sqlalchemy
+grpc-google-iam-v1==0.14.0
+    # via
+    #   google-cloud-artifact-registry
+    #   google-cloud-secret-manager
+grpcio==1.70.0
+    # via
+    #   google-api-core
+    #   googleapis-common-protos
+    #   grpc-google-iam-v1
+    #   grpcio-status
+grpcio-status==1.49.1
+    # via google-api-core
 gunicorn==20.1.0
     # via -r model-engine/requirements.in
 h11==0.14.0
@@ -225,10 +246,6 @@ itsdangerous==2.1.2
     #   starlette
 jaraco-classes==3.3.0
     # via keyring
-jeepney==0.8.0
-    # via
-    #   keyring
-    #   secretstorage
 jinja2==3.0.3
     # via
     #   -r model-engine/requirements.in
@@ -321,11 +338,23 @@ priority==2.0.0
     # via hypercorn
 prompt-toolkit==3.0.39
     # via click-repl
-protobuf==3.20.3
+proto-plus==1.26.0
+    # via
+    #   google-api-core
+    #   google-cloud-artifact-registry
+    #   google-cloud-secret-manager
+protobuf==4.25.6
     # via
     #   -r model-engine/requirements.in
     #   ddsketch
     #   ddtrace
+    #   google-api-core
+    #   google-cloud-artifact-registry
+    #   google-cloud-secret-manager
+    #   googleapis-common-protos
+    #   grpc-google-iam-v1
+    #   grpcio-status
+    #   proto-plus
 psycopg2-binary==2.9.3
     # via -r model-engine/requirements.in
 py-xid==0.3.0
@@ -398,6 +427,7 @@ requests==2.31.0
     #   azure-core
     #   datadog
     #   docker
+    #   google-api-core
     #   huggingface-hub
     #   kubernetes
     #   msal
@@ -428,8 +458,6 @@ safetensors==0.4.2
     # via transformers
 scramp==1.4.4
     # via pg8000
-secretstorage==3.3.3
-    # via keyring
 sentencepiece==0.1.99
     # via -r model-engine/requirements.in
 sh==1.14.3
@@ -487,11 +515,6 @@ tokenizers==0.15.2
     # via
     #   -r model-engine/requirements.in
     #   transformers
-tomli==2.0.1
-    # via
-    #   build
-    #   hypercorn
-    #   pyproject-hooks
 tqdm==4.65.0
     # via
     #   -r model-engine/requirements.in
@@ -516,7 +539,6 @@ typing-extensions==4.10.0
     #   azure-servicebus
     #   azure-storage-blob
     #   boto3-stubs
-    #   cattrs
     #   datadog-api-client
     #   ddtrace
     #   fastapi
@@ -525,7 +547,6 @@ typing-extensions==4.10.0
     #   pydantic-core
     #   sqlalchemy
     #   typing-inspect
-    #   uvicorn
 typing-inspect==0.9.0
     # via dataclasses-json
 tzdata==2023.3
@@ -571,7 +592,7 @@ zipp==3.16.0
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
-setuptools==69.0.3
+setuptools==75.8.0
     # via
     #   gunicorn
     #   kubernetes