For stable releases, the container image is pulled from ghcr.io/clastix/kamaji:stable-xyz OCI registry. The migration job tries to pull the image from docker.io/clastix/kamaji:stable-xyz leading the job and migration failing. As workaround, start the Kamaji controller with argument --migrate-image=ghcr.io/clastix/kamaji:stable-xyz instead.

As for better UX, for stable releases, the job should pull from ghcr.io/clastix/kamaji:stable-xyz without needing to specify with additional argument. For edge releases docker.io/clastix/kamaji:edge-xyz, the argument becomes necessary.