Hi Tom.
As the [docs](https://gluu.org/docs/gluu-server/4.5/admin-guide/certificate/#rotating-certificates-and-keys-in-kubernetes-setup) here, you need to pass the credentials to be able to pull the image.
So you can create a `regcred` secret and add this to your yaml file:
```
spec:
imagePullSecrets:
- name: regcred
```