Private GKE cluster unable to pull public GCR image when VPC Service Perimeter is added. How can this be fixed?

Question

I have setup my GCP organization using the CFT Terraform "Example foundation" scripts. After creating my own restricted share vpc project using the template provid