Menu Close

13.3.5. Updating the global cluster pull secret

You can update the global pull secret for your cluster.


Cluster resources must adjust to the new pull secret, which can temporarily limit the usability of the cluster.


Updating the global pull secret will cause node reboots while the Machine Config Operator (MCO) syncs the changes.


  • You have a new or modified pull secret file to upload.
  • You have access to the cluster as a user with the cluster-admin role.


  • Enter the following command to update the global pull secret for your cluster:

    $ oc set data secret/pull-secret -n openshift-config --from-file=.dockerconfigjson=<pull-secret-location> 1
    Provide the path to the new pull secret file.

This update is rolled out to all nodes, which can take some time depending on the size of your cluster. During this time, nodes are drained and pods are rescheduled on the remaining nodes.