6) pods with images that require the global pull secret
7) pods with images that require a local pull secret
7a) pods with images that require the local pull secret generated by default for the default service account in the namespace
8) pods with more containers: some images requiring the global pull secret, some other the local pull secret

We can store two images in the quay.io/multi-arch or quay.io/openshifttest org and let them readable by two tokens thought ad-hoc for this case.

Each test should:
1. patch the global pull secret with the token for the image to pull through the global pull secret
2. create a secret with the second token, in the local/ephemeral namespace.
2a. patch the pull secret of the default service account for the test in 7a.