After further testing I discovered that the cluster-api-controller is not correctly pinned or using the downstream image, and a similar problem exists for CAPM3 (but only after upgrade from an older chart) due to a mistake in the templating.
Steven Hardy
d719b5b6e5