When the assisted-service is kicked off by an agent CI job - while testing an installation using the image generated through the agent installer - it validates that the current puil secret has a reference to registry containing the speficied release image.

In case of a CI job this is an ephemeral release payload, located in the respective build farm registry where the job is running.

There is a card still open for such task https://issues.redhat.com/browse/DPTP-2784, so for this reason is necessary to enrich the cluster profile with the available build farms auths. Once the card will be completed, such approach could be removed