This message was deleted.

Solved my own problem: without knowing about it, the cluster I am deploying to used

--docker

which does not consider registries.yaml. When using embedded containerd, image pulling works as epected ✅