diff --git a/pkg/imgutil/dockerconfigresolver/registryurl.go b/pkg/imgutil/dockerconfigresolver/registryurl.go
index 57566aee58d..4a1ecfccbdf 100644
--- a/pkg/imgutil/dockerconfigresolver/registryurl.go
+++ b/pkg/imgutil/dockerconfigresolver/registryurl.go
@@ -102,8 +102,10 @@ func (rn *RegistryURL) AllIdentifiers() []string {
 
 	// Docker behavior: if the domain was index.docker.io over 443, we are allowed to additionally read the canonical
 	// docker credentials
-	if rn.Hostname() == "index.docker.io" && rn.Port() == standardHTTPSPort {
-		fullList = append(fullList, dockerIndexServer)
+	if rn.Port() == standardHTTPSPort {
+		if rn.Hostname() == "index.docker.io" || rn.Hostname() == "registry-1.docker.io" {
+			fullList = append(fullList, dockerIndexServer)
+		}
 	}
 
 	// Add legacy variants