Just to save someone 5 minutes of research, if you are using the EKS AMIs based on AL2023 or Bottlerocket, this is already done for you by pointing to an image on ECR. At least on Bottlerocket, I haven't checked AL2023, the image is baked into the AMI so you don't even need to pull it from ECR.

We removed the image registry dependency on AL2023 as well. :)

https://github.com/awslabs/amazon-eks-ami/pull/2000

Thank you, was just about to task my team with figuring out how affected we are by this.