:_mod-docs-content-type: ASSEMBLY
[id="using-image-pull-secrets"]
= Using image pull secrets

include::_attributes/common-attributes.adoc[]
:context: using-image-pull-secrets

toc::[]

[role="_abstract"]
To authenticate with container registries and pull images across {product-title} projects or from secured registries, you can configure and use image pull secrets. You first obtain the registry authentication credentials, which are typically found in the `~/.docker/config.json` file for Docker or the `~/.config/containers/auth.json` file for Podman, created by the {cluster-manager-url-pull} process. This content is then used to create or update the global `pullSecret` object within your cluster.

[NOTE]
====
If you are using the {product-registry} and are pulling from image streams located in the same project, then your pod service account should already have the correct permissions. No additional action should be required.
====

include::modules/images-allow-pods-to-reference-images-across-projects.adoc[leveloffset=+1]

include::modules/images-allow-pods-to-reference-images-from-secure-registries.adoc[leveloffset=+1]

include::modules/creating-pull-secrets.adoc[leveloffset=+2]

include::modules/using-pull-secret.adoc[leveloffset=+2]

include::modules/images-pulling-from-private-registries.adoc[leveloffset=+2]

// cannot get resource "secrets" in API group "" in the namespace "openshift-config"
ifndef::openshift-rosa,openshift-dedicated[]
include::modules/images-update-global-pull-secret.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources

* link:https://quay.io/[Quay.io container registry]
* link:https://registry.redhat.io[Red Hat container registry]
* link:https://docs.redhat.com/en/documentation/openshift_cluster_manager/1-latest/html-single/managing_clusters/index#transferring-cluster-ownership_downloading-and-updating-pull-secrets[Transferring cluster ownership]
endif::openshift-rosa,openshift-dedicated[]
