## Summary Based on discussion in https://gitlab.com/gitlab-org/cloud-native/gitlab-operator/-/issues/447#note_738599607 we need to add API tokens to the pipeline to allow for creation of an `imagePullSecret` for Operator deployments in `dev` (because that instance, and its container registry, are private). ## Acceptance criteria - [x] Project API token is created with `read registry` access - [x] API token is added as a Secret in the `default` namespace (`kubectl create secret docker-registry dev-registry-pull-secret --docker-username=<unsure?> --docker-password=<API token> --docker-server=dev.gitlab.org:5005`) - [x] CI is configured to copy the Secret into the review namespace - [x] GitLab CR template is configured to specify the image pull secret (`global.image.pullSecrets[0].name=dev-registry-pull-secret`) - [x] Address decisions from https://gitlab.com/gitlab-org/cloud-native/gitlab-operator/-/merge_requests/321 (https://gitlab.com/gitlab-org/cloud-native/gitlab-operator/-/blob/master/doc/adr/0014-ci-pipelines-in-dev.md)