diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5802bd98..ce5e6859 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Fixed
+
+- SparkConnectServer: The `imagePullSecret` is now correctly passed to Spark executor pods ([#603]).
+
+[#603]: https://github.com/stackabletech/spark-k8s-operator/pull/603
+
 ## [25.7.0] - 2025-07-23
 
 ## [25.7.0-rc1] - 2025-07-18
diff --git a/rust/operator-binary/src/connect/executor.rs b/rust/operator-binary/src/connect/executor.rs
index 7c3faf6f..bd1bd34b 100644
--- a/rust/operator-binary/src/connect/executor.rs
+++ b/rust/operator-binary/src/connect/executor.rs
@@ -132,6 +132,7 @@ pub fn executor_pod_template(
     let mut template = PodBuilder::new();
     template
         .metadata(metadata)
+        .image_pull_secrets_from_product_image(resolved_product_image)
         .affinity(&config.affinity)
         .add_volume(
             VolumeBuilder::new(VOLUME_MOUNT_NAME_LOG)