Authentication errors are shown after global pull secret is updated in OCP 4

Solution Verified - Updated -


  • When the global pull secret is updated as explained in the documentation, the openshift-apiserver does not reflect it.
  • After updating the global pull secret, the oc import-image <images> or oc start-build commands fail with errors similar to the following ones:

    error: tag latest failed: Internal error occurred: Get unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: imported with errors
    error: tag latest failed: Internal error occurred: Get "": unknown: Authentication is required imported with errors
  • A correct pull-secret is already configured but it fails to get image stream.


  • Red Hat Openshift Container Platform (RHOCP)
    • 4.7.4+
    • 4.8
    • 4.9

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content