[openshift_setup] Replace ICSP with IDMS/ITMS for modern mirror confi…

[dsariel]

[openshift_setup] Replace ICSP with IDMS/ITMS for modern mirror configuration

• Migrate from deprecated ImageContentSourcePolicy to ImageDigestMirrorSet
• Add ImageTagMirrorSet for tag-based image pulls
• Support both digest and tag-based image resolution
• Enable NeverContactSource in the corresponding downstream patch that contains rbac-proxy registry
• Improve granular control over mirror selection order

Signed-off-by: David Sariel dsariel@redhat.com

[1]
https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/config_apis/imagetagmirrorset-config-openshift-io-v1

[2]
https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/config_apis/imagedigestmirrorset-config-openshift-io-v1

ANVIL-58

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign tosky for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[softwarefactory-project-zuul]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/350047a8fe1145fbb99ed778a1cea780

✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 18m 46s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 33m 45s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 51m 00s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 2h 09m 42s
✔️ cifmw-pod-zuul-files SUCCESS in 4m 54s
✔️ adoption-standalone-to-crc-ceph-provider SUCCESS in 3h 05m 42s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 16s
❌ cifmw-pod-pre-commit FAILURE in 8m 26s
❌ cifmw-molecule-openshift_setup FAILURE in 11m 37s

[danpawlik]

Please fix pre-commit errors - especially empty line on the end of the file which was also raised by git

[centosinfra-prod-github-app]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdo/buildset/3c2deb47e91741e29fec2da22d698755

✔️ openstack-k8s-operators-content-provider SUCCESS in 17m 09s
❌ podified-multinode-edpm-deployment-crc RETRY_LIMIT Ansible setup timeout in 1m 18s
❌ cifmw-crc-podified-edpm-baremetal RETRY_LIMIT in 27s
❌ cifmw-crc-podified-edpm-baremetal-minor-update RETRY_LIMIT in 27s
✔️ cifmw-pod-zuul-files SUCCESS in 6m 07s
❌ adoption-standalone-to-crc-ceph-provider RETRY_LIMIT Ansible setup timeout in 1m 17s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 10m 07s
❌ cifmw-pod-pre-commit FAILURE in 9m 35s
❌ cifmw-molecule-openshift_setup RETRY_LIMIT in 22s

[centosinfra-prod-github-app]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdo/buildset/dd6449f9deda4f81b3c84f96decba8c2

✔️ openstack-k8s-operators-content-provider SUCCESS in 1h 37m 23s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 24m 53s
❌ cifmw-crc-podified-edpm-baremetal RETRY_LIMIT in 27s
❌ cifmw-crc-podified-edpm-baremetal-minor-update RETRY_LIMIT in 28s
✔️ cifmw-pod-zuul-files SUCCESS in 5m 24s
❌ adoption-standalone-to-crc-ceph-provider RETRY_LIMIT in 27s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 9m 23s
❌ cifmw-pod-pre-commit FAILURE in 8m 38s
❌ cifmw-molecule-openshift_setup RETRY_LIMIT in 22s