Merge pull request #293 from cblecker/ir-block

Block changes to imageregistry.operator.openshift.io resources

Author: openshift-merge-bot[bot]

build/selectorsyncset.yaml

@@ -571,6 +571,7 @@ objects:
           - cloudcredential.openshift.io
           - machine.openshift.io
           - admissionregistration.k8s.io
+          - imageregistry.operator.openshift.io
           - addons.managed.openshift.io
           - cloudingress.managed.openshift.io
           - managed.openshift.io

pkg/webhooks/regularuser/common/regularuser.go

@@ -57,6 +57,7 @@ var (
 					"cloudcredential.openshift.io",
 					"machine.openshift.io",
 					"admissionregistration.k8s.io",
+					"imageregistry.operator.openshift.io",
 					// Deny ability to manage SRE resources
 					// oc get --raw /apis | jq -r '.groups[] | select(.name | contains("managed")) | .name'
 					"addons.managed.openshift.io",