I have no experience pulling directly from cr.sas.com apart from one Docker image or two using docker cli. Unless your datacenter hosting OCP cluster is located near cr.sas.com, this is not a recommended practice and you should use a mirror registry instead. Viya docker images for a deployment might represent 30-50Gb globally, and some images are individually huge (3-8 Gb). Therefore, performance would suffer each time the kubelet needs refreshing the image, this would add extra even noticeable delays for your endusers. Set up a registry and populate it using mirror manager. There are even mirror registries provided with OCP. I suspect you encounter some binding/authentication issue with cr.sas.com. Try pulling the SAS OQ Docker image : (https://documentation.sas.com/doc/en/sasadmincdc/v_053/oq/n1preqegzpz85rn1c7a6j96ewr9f.htm) If you succeed, then try pulling one image or two from your deployment. If it works then you might try creating a manual image pull secret in your Viya Namespace : see https://docs.openshift.com/container-platform/4.14/openshift_images/managing_images/using-image-pull-secrets.html and configure it with the login/pwd used previously.
... View more