Add assign-oauth-image gatekeeper policy

This allows the rhods oauth container to pull oauth image from internal registry rather than externally. Relevant commit: nerc-project/operations#506

Signed-off-by: Isaiah Stapleton <istaplet@redhat.com>

policy/overlays/nerc-ocp-prod/internal-oauth.yaml

@@ -0,0 +1,22 @@
+apiVersion: mutations.gatekeeper.sh/v1alpha1
+kind: AssignImage
+metadata:
+  name: assign-oauth-image
+spec:
+  applyTo:
+  - groups: [ "" ]
+    kinds: [ "Pod" ]
+    versions: [ "v1" ]
+  location: "spec.containers[name:oauth-proxy].image"
+  parameters:
+    assignDomain: "image-registry.openshift-image-registry.svc:5000"
+    assignPath: "redhat-ods-applications/oauth-proxy"
+    assignTag: ":latest"
+  match:
+    source: "All"
+    scope: Namespaced
+    kinds:
+    - apiGroups: [ "*" ]
+      kinds: [ "Pod" ]
+    namespaces: ["rhods-notebooks"]
+    name: jupyter-nb*