[openshift_setup] Replace ICSP with IDMS/ITMS for modern mirror confi…

[dsariel]

[openshift_setup] Replace ICSP with IDMS/ITMS for modern mirror configuration

• Migrate from deprecated ImageContentSourcePolicy to ImageDigestMirrorSet
• Add ImageTagMirrorSet for tag-based image pulls
• Support both digest and tag-based image resolution
• Enable NeverContactSource in the corresponding downstream patch that contains rbac-proxy registry
• Improve granular control over mirror selection order

Signed-off-by: David Sariel dsariel@redhat.com

[1]
https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/config_apis/imagetagmirrorset-config-openshift-io-v1

[2]
https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/config_apis/imagedigestmirrorset-config-openshift-io-v1

ANVIL-58

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign tosky for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[softwarefactory-project-zuul]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/350047a8fe1145fbb99ed778a1cea780

✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 18m 46s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 33m 45s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 51m 00s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 2h 09m 42s
✔️ cifmw-pod-zuul-files SUCCESS in 4m 54s
✔️ adoption-standalone-to-crc-ceph-provider SUCCESS in 3h 05m 42s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 16s
❌ cifmw-pod-pre-commit FAILURE in 8m 26s
❌ cifmw-molecule-openshift_setup FAILURE in 11m 37s