currently observatorium CRD doesn't expose the pull secret. If the images are located in private repo and requires customized pull secret to pull them, observatorium operator cannot help on that.
Workaround is to set the pull secret as the default one for the deploy namespace. But it's better for operator to support it so that users can specify the pull secret in the CR.