Hi all - what is the current, recommended way to reliably auth my RKE2 cluster to AWS ECR for pulling images? After upgrading from k8s 1.28 to 1.31 I've been unable to manage the ECR credentials reliably. I've tried everything in my toolbox with varying levels of unreliability. Suggestions?