If you are using the {product-registry} and are pulling from image streams located in the same project, then your pod service account should already have the correct permissions and no additional action should be required.
However, for other scenarios, such as referencing images across {product-title} projects or from secured registries, additional configuration steps are required.
You can obtain the image {cluster-manager-url-pull}. This pull secret is called pullSecret.
You use this pull secret to authenticate with the services that are provided by the included authorities, Quay.io and registry.redhat.io, which serve the container images for {product-title} components.