Status: IN
Cross-project image access is granted by binding `system:image-puller` role to `system:serviceaccount:<project>:<sa>` in the target namespace.
Source: entries/2026/03/05/en-documentation-openshift_container_platform-417-html-images-managing-images.md