Several Deployments should pull from a private registry without repeating pull-secret references on every PodSpec. What ServiceAccount technique helps?
Select an answer to reveal the explanation.
Short Explanation
Hang the registry keyring on the ServiceAccount once, then any Pod wearing that SA can pull. That beats copy-pasting imagePullSecrets into every Pod template. Namespace annotations and LimitRanges aren't the pull-secret inheritance path.
Full Explanation
ServiceAccounts can list imagePullSecrets so Pods using that SA inherit registry credentials. Centralizing pull secrets on the SA reduces duplication across Deployments. Namespace annotations, LimitRanges, and the cluster CA ConfigMap do not provide docker-registry pull authentication.