Use Rancher mirrored Host Process Base Image in charts

[HarrisonWAffel]

Right now we are using mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0 in several of the gMSA charts. Ideally we should be using a Rancher mirrored version of this image to ensure that it is always available for use by the gMSA plugin charts

[HarrisonWAffel]

One thing to note which may make mirroring this image a bit more difficult, is that when using skopeo to copy this image to a new registry the digest and size of the single layer changes.

skopeo copy docker://mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0 docker://MY_REGISTRY/mirrored-host-process:v1.0.0 --override-os windows --override-arch amd64

The initial manifest from mcr looks like (crane manifest mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0@sha256:4c5b2a2c0440d2fb50715774c5d1cb2a26997ce1d1d86586cbea882953bfad70 | jq)

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
  "config": {
    "mediaType": "application/vnd.docker.container.image.v1+json",
    "digest": "sha256:66db2536358359ac97453425532c82b15e9873f1630fbc94c6be80f75620f501",
    "size": 870
  },
  "layers": [
    {
      "mediaType": "application/vnd.docker.image.rootfs.diff.tar",
      "digest": "sha256:f2784c8bc8525977aef9b6cd74e9a899274db7d82cd4b028e0ae049270927585",
      "size": 20480
    }
  ]
}

After running skopeo copy docker://mcr.microsoft.com/oss/kubernetes/windows-host-process-containers-base-image:v1.0.0 docker://MY_REGISTRY/mirrored-host-process:v1.0.0 --override-os windows --override-arch amd64 the manifest looks like (crane manifest MY_REGISTRY/mirrored-host-process:v1.0.0 | jq)

{
  "schemaVersion": 2,
  "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
  "config": {
    "mediaType": "application/vnd.docker.container.image.v1+json",
    "size": 870,
    "digest": "sha256:66db2536358359ac97453425532c82b15e9873f1630fbc94c6be80f75620f501"
  },
  "layers": [
    {
      "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip",
      "size": 3417,
      "digest": "sha256:24ab4ac5692db5b008214a13afa50f10236eaf1c815a5beb397480ee25754a4f"
    }
  ]
}

Note the difference in size between each layer, which results in a different digest sha. This makes sync'ing difficult as the image-mirror repo uses skopeo for all of its mirroring operations. This is something that will have to be investigated before we can mirror this into the rancher org.