You can use OCI vault to store username and password credentials required to pull images from private repositories. Additionally, you can configure imagePullSecrets to use vault secrets when you create a container instance. For more information, see Vault Secrets for Image Pull Authorization.