chore(rbac): add access to IDMS and ITMS

Add RBAC rules for imagedigestmirrorsets and imagetagmirrorsets under the config.openshift.io API group.
Required for Kube Enforcer to observe and respond to OpenShift mirror set configurations.

Author: mjshastha

enforcers/kube_enforcer/kubernetes_and_openshift/manifests/kube_enforcer/001_kube_enforcer_config.yaml

@@ -160,6 +160,9 @@ rules:
 #  - apiGroups: ["operator.openshift.io"]
 #    resources: ["imagecontentsourcepolicies", "openshiftapiservers", "kubeapiservers"]
 #    verbs: ["get", "list", "watch"]
+#  - apiGroups: ["config.openshift.io"]
+#    resources: ["imagedigestmirrorsets", "imagetagmirrorsets"]
+#    verbs: ["get", "list", "watch"]
 #  - apiGroups: [ "" ]
 #    resources: ["endpoints"]
 #    verbs: [ "list" ]

enforcers/kube_enforcer/kubernetes_and_openshift/manifests/kube_enforcer_advanced/001_kube_enforcer_config.yaml

@@ -331,6 +331,9 @@ rules:
 #  - apiGroups: ["operator.openshift.io"]
 #    resources: ["imagecontentsourcepolicies", "openshiftapiservers", "kubeapiservers"]
 #    verbs: ["get", "list", "watch"]
+#  - apiGroups: ["config.openshift.io"]
+#    resources: ["imagedigestmirrorsets", "imagetagmirrorsets"]
+#    verbs: ["get", "list", "watch"]
 #  - apiGroups: [ "" ]
 #    resources: ["endpoints"]
 #    verbs: [ "list" ]

enforcers/kube_enforcer/kubernetes_and_openshift/manifests/kube_enforcer_advanced_trivy/001_kube_enforcer_config.yaml

@@ -331,6 +331,9 @@ rules:
 #  - apiGroups: ["operator.openshift.io"]
 #    resources: ["imagecontentsourcepolicies", "openshiftapiservers", "kubeapiservers"]
 #    verbs: ["get", "list", "watch"]
+#  - apiGroups: ["config.openshift.io"]
+#    resources: ["imagedigestmirrorsets", "imagetagmirrorsets"]
+#    verbs: ["get", "list", "watch"]
 #  - apiGroups: [ "" ]
 #    resources: ["endpoints"]
 #    verbs: [ "list" ]

enforcers/kube_enforcer/kubernetes_and_openshift/manifests/kube_enforcer_trivy/001_kube_enforcer_config.yaml

@@ -184,6 +184,9 @@ rules:
 #  - apiGroups: ["operator.openshift.io"]
 #    resources: ["imagecontentsourcepolicies", "openshiftapiservers", "kubeapiservers"]
 #    verbs: ["get", "list", "watch"]
+#  - apiGroups: ["config.openshift.io"]
+#    resources: ["imagedigestmirrorsets", "imagetagmirrorsets"]
+#    verbs: ["get", "list", "watch"]
 #  - apiGroups: [ "" ]
 #    resources: ["endpoints"]
 #    verbs: [ "list" ]