chore(rbac): add access to IDMS and ITMS

Add RBAC rules for imagedigestmirrorsets and imagetagmirrorsets under the config.openshift.io API group.
Required for Kube Enforcer to observe and respond to OpenShift mirror set configurations.

Author: mjshastha

enforcers/kube_enforcer/kubernetes_and_openshift/manifests/kube_enforcer/001_kube_enforcer_config.yaml

@@ -160,12 +160,12 @@ rules:
 #  - apiGroups: ["operator.openshift.io"]
 #    resources: ["imagecontentsourcepolicies", "openshiftapiservers", "kubeapiservers"]
 #    verbs: ["get", "list", "watch"]
+#  - apiGroups: ["config.openshift.io"]
+#    resources: ["imagedigestmirrorsets", "imagetagmirrorsets", "clusteroperators"]
+#    verbs: ["get", "list", "watch"]
 #  - apiGroups: [ "" ]
 #    resources: ["endpoints"]
 #    verbs: [ "list" ]
-#  - apiGroups: [ "config.openshift.io" ]
-#    resources: [ "clusteroperators" ]
-#    verbs: [ "get", "list" ]
 #  - apiGroups: ["security.openshift.io"]
 #    resources: ["securitycontextconstraints"]
 #    verbs: ["get", "list"]

enforcers/kube_enforcer/kubernetes_and_openshift/manifests/kube_enforcer_advanced/001_kube_enforcer_config.yaml

@@ -331,12 +331,12 @@ rules:
 #  - apiGroups: ["operator.openshift.io"]
 #    resources: ["imagecontentsourcepolicies", "openshiftapiservers", "kubeapiservers"]
 #    verbs: ["get", "list", "watch"]
+#  - apiGroups: ["config.openshift.io"]
+#    resources: ["imagedigestmirrorsets", "imagetagmirrorsets", "clusteroperators"]
+#    verbs: ["get", "list", "watch"]
 #  - apiGroups: [ "" ]
 #    resources: ["endpoints"]
 #    verbs: [ "list" ]
-#  - apiGroups: [ "config.openshift.io" ]
-#    resources: [ "clusteroperators" ]
-#    verbs: [ "get", "list" ]
 #  - apiGroups: ["security.openshift.io"]
 #    resources: ["securitycontextconstraints"]
 #    verbs: ["get", "list"]

enforcers/kube_enforcer/kubernetes_and_openshift/manifests/kube_enforcer_advanced_trivy/001_kube_enforcer_config.yaml

@@ -331,12 +331,12 @@ rules:
 #  - apiGroups: ["operator.openshift.io"]
 #    resources: ["imagecontentsourcepolicies", "openshiftapiservers", "kubeapiservers"]
 #    verbs: ["get", "list", "watch"]
+#  - apiGroups: ["config.openshift.io"]
+#    resources: ["imagedigestmirrorsets", "imagetagmirrorsets", "clusteroperators"]
+#    verbs: ["get", "list", "watch"]
 #  - apiGroups: [ "" ]
 #    resources: ["endpoints"]
 #    verbs: [ "list" ]
-#  - apiGroups: [ "config.openshift.io" ]
-#    resources: [ "clusteroperators" ]
-#    verbs: [ "get", "list" ]
 #  - apiGroups: ["security.openshift.io"]
 #    resources: ["securitycontextconstraints"]
 #    verbs: ["get", "list"]

enforcers/kube_enforcer/kubernetes_and_openshift/manifests/kube_enforcer_trivy/001_kube_enforcer_config.yaml

@@ -184,12 +184,12 @@ rules:
 #  - apiGroups: ["operator.openshift.io"]
 #    resources: ["imagecontentsourcepolicies", "openshiftapiservers", "kubeapiservers"]
 #    verbs: ["get", "list", "watch"]
+#  - apiGroups: ["config.openshift.io"]
+#    resources: ["imagedigestmirrorsets", "imagetagmirrorsets", "clusteroperators"]
+#    verbs: ["get", "list", "watch"]
 #  - apiGroups: [ "" ]
 #    resources: ["endpoints"]
 #    verbs: [ "list" ]
-#  - apiGroups: [ "config.openshift.io" ]
-#    resources: [ "clusteroperators" ]
-#    verbs: [ "get", "list" ]
 #  - apiGroups: ["security.openshift.io"]
 #    resources: ["securitycontextconstraints"]
 #    verbs: ["get", "list"]