What registry permissions does OpenShift cluster node require?

In an OpenShift environment that hosts IBM Cloud Pak for Data, all cluster nodes—including master and worker nodes—must have access to the container registry to pull required images during deployment and runtime. In scenarios involving custom images, some nodes may also need to push to the registry. While the bastion node may initiate the setup or mirror images, it is not the only node involved. Therefore, all nodes should be configured with both pull and, where applicable, push access to the registry to ensure consistent deployment and operations.