Pulling the OCIR images to OKE without Secrets on OKE Private subnet(No NAT gateway)

[arunreddy00]

Hi team,

I have No internet access to the worker node.

I have followed all the steps & pre-requites of IAM for instance principals. However, I'm not able to pull images from the OCI registry.
Please help me on how to troubleshoot & pull the images from the private registry using credentials provider.

Warning Failed 8m13s (x4 over 9m48s) kubelet Failed to pull image "iad.ocir.io/namespace/image:tag": initializing source docker://iad.ocir.io/namespace/image:tag: reading manifest node-v3.28.2 in iad.ocir.io/namespace/image: denied: Anonymous users are only allowed read access on public repos

Questions:

• Is it achievable to pull images on worker node running in private subnet ?