I have tried following the FAQ for Authenticating containerd against DockerHub, but it does not profit as I expect. My pulls from deployments in k3d are still pulling from the unauthenticated account. I still have to create a

.dockerconfigjson

secret and use

imagePullSecrets

on each of the deployments. This is what FAQ says to do.

# saved as e.g. $HOME/registries.yaml
configs:
  "<http://docker.io|docker.io>":
    auth:
      username: "$USERNAME"
      password: "$PASSWORD"

I have a k3d config yaml

registries:
  create:
    name: registry.local
    hostPort: "9000"
  config: |
    mirrors:
      <http://docker.io|docker.io>:
        endpoint:
        - "<http://host.k3d.internal:6000>"
    configs:
      "<http://docker.io|docker.io>":
        auth:
          username: "myusername"
          password: "mypassword"

I have a registry mirror at

localhost:6000

in Docker Engine (Docker Desktop).