Offline Bundle issues

I have a customer having issues upgrading the CSI Driver from 1.3 to 1.4.

The problem is the security people dont allow access to TLS 1.3 on the firewall, so they can do an online upgrade.

They tried doing the offline bundle, but they are still being requested to access online which is still blocked. Seems the Kubernetes node registrar is still being asked to be downloaded from k8s.gcr.io domain