title: how does K8S handles multiple remote docker registeries in POD definition using imagePullSecrets list
body: <p>I would like to access multiple remote registries to pull images. 
  In the k8s <a href="https://kubernetes.io/docs/concepts/containers/images/" rel="nofollow noreferrer">documentation</a> they say:</p>
  
  <blockquote>
    <p>(If you need access to multiple registries, you can create one secret
    for each registry. Kubelet will merge any imagePullSecrets into a
    single virtual .docker/config.json)</p>
  </blockquote>
  
  <p>and so the POD definition should be something like this:</p>
  
  <pre><code>apiVersion: v1
  kind: Pod
  spec:
    containers:
      - name: ...
    imagePullSecrets:
      - name: secret1
      - name: secret2
      - ....
      - name: secretN
  </code></pre>
  
  <p>Now I am not sure how K8S will pick the right secret for each image? will all secrets be verified one by one each time? and how K8S will handle the failed retries? and if a specific amount of unauthorized retries could lead to some lock state in k8sor docker registries?</p>
  
  <p>/ Thanks</p>