This Docker/OCI Image is made to keep fresh AWS ECR credentials in any given k8s cluster.
You'll need to feed the following ones:
AWS_DEFAULT_REGIONAWS_ACCESS_KEY_IDAWS_SECRET_ACCESS_KEY
A good idea would be to run this as a CronJob with a Service Account that can edit and delete secrets, as the resulting container will connect to the Kubernetes API and update the Docker Registry private credentials by using a secret called aws-registry.
The console output is very verbose, so just open the logs from the pod and check how everything is going.