https://github.com/rancher/helm-project-operator/blob/f1efb28db62cb8a30ef5f3625a8b58702eaa679e/charts/helm-project-operator/templates/deployment.yaml#L79
Even if the embedded helm controller is disabled, the Helm Job Image should still be overridden to ensure that the image deployed into the HelmChart CR by a Helm Project Operator contains private registry details.
Currently, this means that an airgapped RKE2 cluster will not have this image overridden on deployment by the operator