When attempting to pull an image from any source (Broadcom or other sites) the pod upgrade fails with "failed to pull and unpack images".
The causes can be multiple. In this example pulling from projects5-proxy.projects.packages.broadcom.com/vmware-cloud-director/cloud-provider-for-cloud-director:1.6.1 is returning a certificate error.
Correct the image location. This can be done with the kubectl set image command. Using our example from the cause:
kubectl set image pod <pod name> *=projects.packages.broadcom.com/vmware-cloud-director/cloud-provider-for-cloud-director:1.6.1 -n kube-system
This command updates all images used by the pod to use the updated public repository.