chore: Update Image MIrror Policy

README.md

@@ -134,9 +134,9 @@ end
 
 <https://www.okd.io/>
 
-| Kubernetes Channel | OKD Channel | OKD OS           | Host Operating System |
-| ------------------ | ----------- | ---------------- | --------------------- |
-| v1.27              | stable-4.11 | Fedora CoreOS 38 | RHEL 9.3              |
+| Kubernetes Channel | OKD Version | OKD Channel | OKD OS           | Host Operating System |
+| ------------------ | ----------- | ----------- | ---------------- | --------------------- |
+| v1.28              | 4.15-\*     | stable-4.11 | Fedora CoreOS 39 | RHEL 9.3              |
 
 **Machines:**
 

kubernetes/kyverno/base/deployments.yaml

@@ -39,6 +39,9 @@ spec:
           effect: NoSchedule
         - key: node-role.kubernetes.io/infra
           effect: NoSchedule
+      nodeSelector:
+        kubernetes.io/os: linux
+        node-role.kubernetes.io/control-plane: ""
       dnsPolicy: ClusterFirst
       serviceAccountName: kyverno-admission-controller
       automountServiceAccountToken: true

kubernetes/kyverno/base/kustomization.yaml

@@ -14,3 +14,4 @@ resources:
   - ./resource-quota.yaml
   - ./role.yaml
   - ./service.yaml
+  - ./pdb.yaml

kubernetes/kyverno/base/pdb.yaml

@@ -0,0 +1,12 @@
+kind: PodDisruptionBudget
+apiVersion: policy/v1
+metadata:
+  name: "kyverno-admission-controller"
+  namespace: kyverno
+spec:
+  maxUnavailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: admission-controller
+      app.kubernetes.io/instance: kyverno
+      app.kubernetes.io/part-of: kyverno

kubernetes/longhorn/base/ui-deployment.yaml

@@ -64,7 +64,7 @@ spec:
       automountServiceAccountToken: true
       containers:
         - name: oauth-proxy
-          image: quay.io/openshift/origin-oauth-proxy:4.15@sha256:106ce5edfceaff8a650016707f49b2dbe9220cb734d6c3a3df847fa07ae15585
+          image: quay.io/openshift/origin-oauth-proxy:4.15
           imagePullPolicy: IfNotPresent
           resources:
             requests:

okd/okd-configuration/base/image-mirror-set.yaml

@@ -39,13 +39,25 @@ spec:
         - registry.arthurvardevanyan.com/kube-vip
       source: ghcr.io/kube-vip
       mirrorSourcePolicy: AllowContactingSource
+    - mirrors:
+        - registry.arthurvardevanyan.com/longhornio
+      source: docker.io/longhornio
+      mirrorSourcePolicy: NeverContactSource
+    - mirrors:
+        - registry.arthurvardevanyan.com/kyverno/kyverno
+      source: ghcr.io/kyverno/kyverno
+      mirrorSourcePolicy: NeverContactSource
 ---
 apiVersion: config.openshift.io/v1
 kind: ImageTagMirrorSet
 metadata:
   name: image-tag-mirror
 spec:
   imageTagMirrors:
+    - mirrors:
+        - registry.arthurvardevanyan.com/openshift/origin-oauth-proxy
+      source: quay.io/openshift/origin-oauth-proxy
+      mirrorSourcePolicy: AllowContactingSource
     - mirrors:
         - registry.arthurvardevanyan.com/projectquay
       source: quay.io/projectquay
@@ -165,12 +177,8 @@ spec:
       source: gcr.io/kubebuilder
       mirrorSourcePolicy: NeverContactSource
     - mirrors:
-        - registry.arthurvardevanyan.com/netobserv/network-observability-operator
-      source: quay.io/netobserv/network-observability-operator
-      mirrorSourcePolicy: NeverContactSource
-    - mirrors:
-        - registry.arthurvardevanyan.com/netobserv/network-observability-console-plugin
-      source: quay.io/netobserv/network-observability-console-plugin
+        - registry.arthurvardevanyan.com/netobserv
+      source: quay.io/netobserv
       mirrorSourcePolicy: NeverContactSource
     - mirrors:
         - registry.arthurvardevanyan.com/mongodb/mongo