# Pull Images from a Private Registry

Container images may be pulled from a private registry. As an alternative to granting the default service account access to a private registry, a Pod can be configured to use imagePullSecrets. This will pass the credentials down to the StatefulSet spec when the Operator pulls an image.

To create a secret with the necessary credentials:

1. [Create a secret](https://kubernetes.io/docs/concepts/configuration/secret/#creating-a-secret) with the required credentials.

2. Add the following lines and secret name to the spec section of the [sdb-cluster.yaml](https://docs.singlestore.com/db/v9.1/deploy/kubernetes/create-the-object-definition-files/sdb-cluster-yaml.md) file:
   ```yaml
   spec:
     containers:
     - name: private-reg-container
       image: <your-private-image>
     imagePullSecrets:
     - name: <secret-name>
   ```

This will allow the image to be pulled from a private registry using the specified credentials.

Refer to the following for additional information.

* [Images](https://kubernetes.io/docs/concepts/containers/images/)
* [Pull an Image from a Private Registry](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/)
* [Secrets](https://kubernetes.io/docs/concepts/configuration/secret/)
* [Specifying imagePullSecrets on a Pod](https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod)

***

Modified at: September 7, 2022

Source: [/db/v9.1/reference/singlestore-operator-reference/pull-images-from-a-private-registry/](https://docs.singlestore.com/db/v9.1/reference/singlestore-operator-reference/pull-images-from-a-private-registry/)

(An index of the documentation is available at /llms.txt)