Background
Kubernetes supports the ability to dynamically fetch credentials for a container registry service.Prior to Kubernetes v1.20, this capability was compiled into the kubelet and only available for Amazon Elastic Container Registry, Azure Container Registry, and Google Cloud Container Registry.Figure
1:Kubelet built-in credential provider support for Amazon