v13 registry mirroring and proxying testing

[slntopp]

No description provided.

[mondoo-code-review]

Adds e2e tests for registry mirroring/proxy and fixes ImagePullSecrets not being propagated on resource updates.

[slntopp]

Addressed all review comments:

1. SSH firewall rule (proxy.tf:89): Removed public IP (access_config) and switched to IAP tunneling. SSH firewall now only allows GCP IAP range (35.235.240.0/20). Verify script updated to use --tunnel-through-iap.

2. Precondition for enable_proxy_test (proxy.tf:9): Added lifecycle.precondition to enforce that enable_mirror_test must be true when enable_proxy_test is set.

3. Trap single quotes (deploy-operator-mirroring.sh:51): Changed to single-quoted trap to defer variable expansion.

4. Trailing newline (terraform.example.tfvars:11): Added trailing newline.

5. Unit tests for update_fields.go: Added update_fields_test.go with tests for ImagePullSecrets propagation across all three update helpers (CronJob, Deployment, DaemonSet), plus a test verifying unmanaged fields are preserved.

[mondoo-code-review]

All three previous findings have been addressed: Terraform validation added, trap quoting fixed, and unit tests added.

[github-actions]

Test Results

  7 files  ±0   44 suites  ±0   1h 42m 8s ⏱️ + 11m 12s
397 tests +4  393 ✅ ±0  0 💤 ±0  4 ❌ +4 
463 runs  +4  453 ✅ ±0  6 💤 ±0  4 ❌ +4 

For more details on these failures, see this check.

Results for commit c22c386. ± Comparison against base commit 0568f1a.

♻️ This comment has been updated with latest results.