Help needed while using ecr-credential-provider

[usurinisso]

hey everyone, i'm currently using AWS ECR as my registry base, and had to setup ecr credential provider. My question is, as the preinstall_exec is being executed only on initial cluster creation with terraform apply while passing the credentials, what happens if i introduce new nodes or the cluster autoscaler scales up? will i experience image pull errors? or is the preinstall_exec get baked inside and newly started nodes will have the same configuration?
kube.tf:

  preinstall_exec = [
    "mkdir -p /etc/kubernetes/bin /etc/kubernetes",
    "curl -fL -o /etc/kubernetes/bin/ecr-credential-provider https://xxxxxxxxxx/ecr-credential-provider/amd64/ecr-credential-provider",
    "chmod +x /etc/kubernetes/bin/ecr-credential-provider",
    "echo 'apiVersion: kubelet.config.k8s.io/v1' | tee /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo 'kind: CredentialProviderConfig' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo 'providers:' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '  - name: ecr-credential-provider' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '    matchImages:' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '      - \"*.dkr.ecr.*.amazonaws.com\"' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '      - \"*.dkr.ecr.*.amazonaws.com.cn\"' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '    defaultCacheDuration: \"12h\"' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '    apiVersion: credentialprovider.kubelet.k8s.io/v1' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '    env:' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '      - name: AWS_REGION' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '        value: us-east-1' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '      - name: AWS_ACCESS_KEY_ID' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '        value: ${var.aws_access_key_id}' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '      - name: AWS_SECRET_ACCESS_KEY' >> /etc/kubernetes/ecr-credential-provider-config.yaml",
    "echo '        value: ${var.aws_secret_access_key}' >> /etc/kubernetes/ecr-credential-provider-config.yaml"
  ]
  
    k3s_agent_kubelet_args = [
    "--image-credential-provider-config=/etc/kubernetes/ecr-credential-provider-config.yaml",
    "--image-credential-provider-bin-dir=/etc/kubernetes/bin"
  ]