Hey @Sam, you can attach an image pull secret to a service account.
Any pod using that uses service account (including default) can take advantage of the secret.
you can bind the pullSecret to your pod, but you’re still left with having to create the secret every time you make a namespace.
Also, you can create the rc/deployment manually and either specify the imagepullsecret or a service account that has the secret or add the imagepullsecret to the default service account, in which case you'd be able to use `kubectl run` and not have to make any manual changes to the manifest.
Depending on your environment and how secret this imagepullsecret is, will change how you approach it.