diff --git a/scripts/mk/ephemeral.mk b/scripts/mk/ephemeral.mk
index 7db584a..c8be50a 100644
--- a/scripts/mk/ephemeral.mk
+++ b/scripts/mk/ephemeral.mk
@@ -77,6 +77,7 @@ $(GO_OUTPUT/get-token.py):
 	curl -Ls -o "$(GO_OUTPUT/get-token.py)" "https://gitlab.cee.redhat.com/klape/get-token/-/raw/main/get-token.py"
 
 # NOTE Changes to config/bonfire.yaml could impact to this rule
+# make ephemeral-deploy EPHEMERAL_NO_BUILD=y CONTAINER_IMAGE_BASE=quay.io/cloudservices/idmsvc-frontend CONTAINER_IMAGE_TAG=7b4abc3
 .PHONY: ephemeral-deploy
 ephemeral-deploy:  ## Deploy application using 'config/bonfire.yaml' file
 	[ "$(EPHEMERAL_NO_BUILD)" == "y" ] || $(MAKE) ephemeral-build-deploy
@@ -122,6 +123,8 @@ ephemeral-process: ## Process application from the current namespace
 .PHONY: ephemeral-namespace-create
 ephemeral-namespace-create:  ## Create a namespace (requires ephemeral environment)
 	oc project "$(shell source .venv/bin/activate && bonfire namespace reserve --force --pool "$(POOL)" 2>/dev/null)"
+	oc create -f "$(PROJECT_DIR)/secrets/ephemeral/cloudservice-pullsecret.yaml"
+	oc secrets link default cloudservice-pullsecret --for=pull
 
 .PHONY: ephemeral-namespace-delete
 ephemeral-namespace-delete: ## Delete current namespace (requires ephemeral environment)