diff --git a/regsync.yaml b/regsync.yaml
new file mode 100644
index 0000000000..e3da4b0bf9
--- /dev/null
+++ b/regsync.yaml
@@ -0,0 +1,1610 @@
+---
+version: 1
+creds:
+- registry: '{{ env "REGISTRY_ENDPOINT" }}'
+  user: '{{ env "REGISTRY_USERNAME" }}'
+  pass: '{{ env "REGISTRY_PASSWORD" }}'
+defaults:
+  mediaTypes:
+  - application/vnd.docker.distribution.manifest.v2+json
+  - application/vnd.docker.distribution.manifest.list.v2+json
+  - application/vnd.oci.image.manifest.v1+json
+  - application/vnd.oci.image.index.v1+json
+sync:
+- source: docker.io/rancher/aks-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/aks-operator'
+  type: repository
+  tags:
+    allow:
+    - v1.0.1
+    - v1.0.2
+    - v1.0.3
+    - v1.0.4
+    - v1.0.5
+    - v1.0.6
+    - v1.0.7
+    - v1.0.9
+    - v1.1.0
+    - v1.1.1
+    - v1.1.2
+    - v1.1.3
+- source: docker.io/rancher/backup-restore-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/backup-restore-operator'
+  type: repository
+  tags:
+    allow:
+    - v1.0.2
+    - v1.0.3
+    - v1.0.4-rc4
+    - v1.2.0
+    - v1.2.1
+    - v2.0.0
+    - v2.0.1
+    - v2.1.0
+    - v2.1.1
+    - v2.1.2
+    - v2.1.3
+    - v2.1.4
+    - v2.1.5
+    - v3.0.0
+    - v3.1.0
+    - v3.1.1
+    - v3.1.2
+- source: docker.io/rancher/banzaicloud-fluentd
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/banzaicloud-fluentd'
+  type: repository
+  tags:
+    allow:
+    - v1.11.2-alpine-2
+    - v1.11.5-alpine-1
+- source: docker.io/rancher/banzaicloud-logging-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/banzaicloud-logging-operator'
+  type: repository
+  tags:
+    allow:
+    - 3.6.0
+    - 3.8.2
+- source: docker.io/rancher/cis-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/cis-operator'
+  type: repository
+  tags:
+    allow:
+    - v1.0.1
+    - v1.0.10
+    - v1.0.11
+    - v1.0.12
+    - v1.0.3
+    - v1.0.4
+    - v1.0.5
+    - v1.0.6
+    - v1.0.7
+    - v1.0.8
+    - v1.0.9
+- source: docker.io/rancher/coredns-coredns
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/coredns-coredns'
+  type: repository
+  tags:
+    allow:
+    - 1.6.2
+- source: docker.io/rancher/coreos-kube-state-metrics
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/coreos-kube-state-metrics'
+  type: repository
+  tags:
+    allow:
+    - v1.9.7
+- source: docker.io/rancher/coreos-prometheus-config-reloader
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/coreos-prometheus-config-reloader'
+  type: repository
+  tags:
+    allow:
+    - v0.38.1
+- source: docker.io/rancher/coreos-prometheus-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/coreos-prometheus-operator'
+  type: repository
+  tags:
+    allow:
+    - v0.38.1
+- source: docker.io/rancher/curlimages-curl
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/curlimages-curl'
+  type: repository
+  tags:
+    allow:
+    - 7.70.0
+- source: docker.io/rancher/directxman12-k8s-prometheus-adapter-amd64
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/directxman12-k8s-prometheus-adapter-amd64'
+  type: repository
+  tags:
+    allow:
+    - v0.6.0
+    - v0.7.0
+- source: docker.io/rancher/eks-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/eks-operator'
+  type: repository
+  tags:
+    allow:
+    - v1.1.1
+    - v1.1.2
+    - v1.1.3
+    - v1.1.4
+    - v1.1.5
+    - v1.2.0
+    - v1.2.1
+    - v1.2.2
+- source: docker.io/rancher/externalip-webhook
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/externalip-webhook'
+  type: repository
+  tags:
+    allow:
+    - v0.1.4
+    - v0.1.6
+    - v1.0.0
+    - v1.0.1
+- source: docker.io/rancher/fleet
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/fleet'
+  type: repository
+  tags:
+    allow:
+    - v0.3.0
+    - v0.3.1
+    - v0.3.10
+    - v0.3.10-security1
+    - v0.3.11
+    - v0.3.2
+    - v0.3.3
+    - v0.3.4
+    - v0.3.5
+    - v0.3.6
+    - v0.3.7
+    - v0.3.8
+    - v0.3.9
+    - v0.4.0
+    - v0.4.1
+    - v0.5.0
+    - v0.5.1
+    - v0.5.3
+    - v0.6.0
+    - v0.7.0
+    - v0.7.1
+    - v0.8.0
+- source: docker.io/rancher/fleet-agent
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/fleet-agent'
+  type: repository
+  tags:
+    allow:
+    - v0.3.0
+    - v0.3.1
+    - v0.3.10
+    - v0.3.10-security1
+    - v0.3.11
+    - v0.3.2
+    - v0.3.3
+    - v0.3.4
+    - v0.3.5
+    - v0.3.6
+    - v0.3.7
+    - v0.3.8
+    - v0.3.9
+    - v0.4.0
+    - v0.4.1
+    - v0.5.0
+    - v0.5.1
+    - v0.5.3
+    - v0.6.0
+    - v0.7.0
+    - v0.7.1
+    - v0.8.0
+- source: docker.io/rancher/fluent-bit
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/fluent-bit'
+  type: repository
+  tags:
+    allow:
+    - 1.6.10
+    - 1.7.4
+    - 1.8.15
+    - 1.8.9
+    - 1.9.3
+- source: docker.io/rancher/fluent-bit-out-syslog
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/fluent-bit-out-syslog'
+  type: repository
+  tags:
+    allow:
+    - 0.1.0
+- source: docker.io/rancher/fluent-fluent-bit
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/fluent-fluent-bit'
+  type: repository
+  tags:
+    allow:
+    - 1.5.4
+    - 1.5.4-debug
+    - 1.6.4
+    - 1.6.4-debug
+- source: docker.io/rancher/gitjob
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/gitjob'
+  type: repository
+  tags:
+    allow:
+    - v0.1.11
+    - v0.1.12
+    - v0.1.13
+    - v0.1.15
+    - v0.1.21
+    - v0.1.23
+    - v0.1.26
+    - v0.1.26-security1
+    - v0.1.30
+    - v0.1.32
+    - v0.1.32-security1
+    - v0.1.37
+    - v0.1.54
+    - v0.1.6
+    - v0.1.76
+    - v0.1.8
+- source: docker.io/rancher/gke-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/gke-operator'
+  type: repository
+  tags:
+    allow:
+    - v1.1.1
+    - v1.1.2
+    - v1.1.3
+    - v1.1.4
+    - v1.1.5
+    - v1.1.6
+- source: docker.io/rancher/grafana-grafana
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/grafana-grafana'
+  type: repository
+  tags:
+    allow:
+    - 7.1.5
+- source: docker.io/rancher/hardened-node-feature-discovery
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/hardened-node-feature-discovery'
+  type: repository
+  tags:
+    allow:
+    - v0.11.2-build20220901
+    - v0.12.1-build20230120
+    - v0.13.2-build20230605
+- source: docker.io/rancher/harvester-cloud-provider
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/harvester-cloud-provider'
+  type: repository
+  tags:
+    allow:
+    - v0.1.1
+    - v0.1.3
+    - v0.1.4
+    - v0.1.5
+- source: docker.io/rancher/harvester-csi-driver
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/harvester-csi-driver'
+  type: repository
+  tags:
+    allow:
+    - 
+    - v0.1.1
+    - v0.1.3
+    - v0.1.5
+- source: docker.io/rancher/helm-project-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/helm-project-operator'
+  type: repository
+  tags:
+    allow:
+    - v0.0.1
+    - v0.1.0
+    - v0.2.1
+- source: docker.io/rancher/istio-coredns-plugin
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/istio-coredns-plugin'
+  type: repository
+  tags:
+    allow:
+    - 0.2-istio-1.1
+- source: docker.io/rancher/istio-install-cni
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/istio-install-cni'
+  type: repository
+  tags:
+    allow:
+    - 1.7.1
+    - 1.7.3
+- source: docker.io/rancher/istio-installer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/istio-installer'
+  type: repository
+  tags:
+    allow:
+    - 1.10.4-rancher1
+    - 1.10.4-rancher4
+    - 1.10.4-rancher5
+    - 1.10.4-rancher6
+    - 1.11.4-rancher1
+    - 1.11.7-rancher1
+    - 1.11.8-rancher2
+    - 1.12.6-rancher2
+    - 1.12.6-rancher3
+    - 1.13.3-rancher1
+    - 1.14.1-rancher1
+    - 1.14.3-rancher1
+    - 1.15.3-rancher1
+    - 1.16.3-rancher1
+    - 1.17.2-rancher1
+    - 1.18.2-rancher1
+    - 1.7.1-rancher1
+    - 1.7.3-rancher2
+    - 1.8.3-rancher1
+    - 1.8.5-rancher1
+    - 1.8.6-rancher1
+    - 1.9.3-rancher2
+    - 1.9.5-rancher1
+    - 1.9.6-rancher1
+    - 1.9.8-rancher1
+- source: docker.io/rancher/istio-mixer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/istio-mixer'
+  type: repository
+  tags:
+    allow:
+    - 1.7.1
+    - 1.7.3
+- source: docker.io/rancher/istio-pilot
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/istio-pilot'
+  type: repository
+  tags:
+    allow:
+    - 1.7.1
+    - 1.7.3
+- source: docker.io/rancher/istio-proxyv2
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/istio-proxyv2'
+  type: repository
+  tags:
+    allow:
+    - 1.7.1
+    - 1.7.3
+- source: docker.io/rancher/jaegertracing-all-in-one
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/jaegertracing-all-in-one'
+  type: repository
+  tags:
+    allow:
+    - 1.20.0
+- source: docker.io/rancher/jettech-kube-webhook-certgen
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/jettech-kube-webhook-certgen'
+  type: repository
+  tags:
+    allow:
+    - v1.2.1
+- source: docker.io/rancher/jimmidyson-configmap-reload
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/jimmidyson-configmap-reload'
+  type: repository
+  tags:
+    allow:
+    - v0.2.2
+    - v0.3.0
+- source: docker.io/rancher/kiali-kiali
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/kiali-kiali'
+  type: repository
+  tags:
+    allow:
+    - v1.23.0
+    - v1.24.0
+- source: docker.io/rancher/kiwigrid-k8s-sidecar
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/kiwigrid-k8s-sidecar'
+  type: repository
+  tags:
+    allow:
+    - 0.1.151
+- source: docker.io/rancher/klipper-helm
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/klipper-helm'
+  type: repository
+  tags:
+    allow:
+    - v0.7.0-build20220315
+- source: docker.io/rancher/kube-rbac-proxy
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/kube-rbac-proxy'
+  type: repository
+  tags:
+    allow:
+    - v0.5.0
+- source: docker.io/rancher/kubectl
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/kubectl'
+  type: repository
+  tags:
+    allow:
+    - v1.18.6
+    - v1.20.15
+    - v1.20.2
+    - v1.21.5
+    - v1.21.9
+    - v1.22.6
+    - v1.23.3
+    - v1.26.3
+    - v1.28.1
+- source: docker.io/rancher/library-busybox
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/library-busybox'
+  type: repository
+  tags:
+    allow:
+    - 1.31.1
+- source: docker.io/rancher/library-nginx
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/library-nginx'
+  type: repository
+  tags:
+    allow:
+    - 1.19.2-alpine
+- source: docker.io/rancher/longhornio-csi-attacher
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-csi-attacher'
+  type: repository
+  tags:
+    allow:
+    - v2.0.0
+    - v2.2.1-lh1
+- source: docker.io/rancher/longhornio-csi-node-driver-registrar
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-csi-node-driver-registrar'
+  type: repository
+  tags:
+    allow:
+    - v1.2.0
+    - v1.2.0-lh1
+- source: docker.io/rancher/longhornio-csi-provisioner
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-csi-provisioner'
+  type: repository
+  tags:
+    allow:
+    - v1.4.0
+    - v1.6.0-lh1
+- source: docker.io/rancher/longhornio-csi-resizer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-csi-resizer'
+  type: repository
+  tags:
+    allow:
+    - v0.3.0
+    - v0.5.1-lh1
+- source: docker.io/rancher/longhornio-csi-snapshotter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-csi-snapshotter'
+  type: repository
+  tags:
+    allow:
+    - v2.1.1-lh1
+- source: docker.io/rancher/longhornio-longhorn-engine
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-longhorn-engine'
+  type: repository
+  tags:
+    allow:
+    - v1.0.2
+    - v1.1.0
+- source: docker.io/rancher/longhornio-longhorn-instance-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-longhorn-instance-manager'
+  type: repository
+  tags:
+    allow:
+    - v1_20200514
+    - v1_20201216
+- source: docker.io/rancher/longhornio-longhorn-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-longhorn-manager'
+  type: repository
+  tags:
+    allow:
+    - v1.0.2
+    - v1.1.0
+- source: docker.io/rancher/longhornio-longhorn-share-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-longhorn-share-manager'
+  type: repository
+  tags:
+    allow:
+    - v1_20201204
+- source: docker.io/rancher/longhornio-longhorn-ui
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/longhornio-longhorn-ui'
+  type: repository
+  tags:
+    allow:
+    - v1.0.2
+    - v1.1.0
+- source: docker.io/rancher/mirrored-amazon-aws-cli
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-amazon-aws-cli'
+  type: repository
+  tags:
+    allow:
+    - 2.0.52
+    - 2.9.14
+- source: docker.io/rancher/mirrored-appscode-kubed
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-appscode-kubed'
+  type: repository
+  tags:
+    allow:
+    - v0.13.2
+- source: docker.io/rancher/mirrored-banzaicloud-fluentd
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-banzaicloud-fluentd'
+  type: repository
+  tags:
+    allow:
+    - v1.11.5-alpine-12
+    - v1.11.5-alpine-9
+    - v1.12.4-alpine-1
+    - v1.13.3-alpine-11
+    - v1.14.4-alpine-2
+    - v1.14.5-alpine-1
+    - v1.14.6-alpine-5
+- source: docker.io/rancher/mirrored-banzaicloud-logging-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-banzaicloud-logging-operator'
+  type: repository
+  tags:
+    allow:
+    - 3.12.0
+    - 3.15.0
+    - 3.17.10
+    - 3.17.3
+    - 3.17.4
+    - 3.17.7
+    - 3.9.0
+    - 3.9.4
+- source: docker.io/rancher/mirrored-cloud-provider-vsphere-cpi-release-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-cloud-provider-vsphere-cpi-release-manager'
+  type: repository
+  tags:
+    allow:
+    - latest
+    - v1.18.0
+    - v1.19.0
+    - v1.2.1
+    - v1.20.0
+    - v1.20.1
+    - v1.21.0
+    - v1.21.3
+    - v1.22.5
+    - v1.22.6
+    - v1.22.7
+    - v1.22.8
+    - v1.23.0
+    - v1.23.3
+    - v1.23.4
+    - v1.24.3
+    - v1.24.5
+    - v1.25.0
+    - v1.25.2
+    - v1.26.1
+- source: docker.io/rancher/mirrored-cloud-provider-vsphere-csi-release-driver
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-cloud-provider-vsphere-csi-release-driver'
+  type: repository
+  tags:
+    allow:
+    - latest
+    - v2.1.0
+    - v2.2.1
+    - v2.3.0
+    - v2.4.1
+    - v2.4.3
+    - v2.5.1
+    - v2.5.4
+    - v2.6.2
+    - v2.6.3
+    - v2.7.0
+    - v2.7.1
+    - v3.0.1
+- source: docker.io/rancher/mirrored-cloud-provider-vsphere-csi-release-syncer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-cloud-provider-vsphere-csi-release-syncer'
+  type: repository
+  tags:
+    allow:
+    - latest
+    - v2.1.0
+    - v2.2.1
+    - v2.3.0
+    - v2.4.1
+    - v2.4.3
+    - v2.5.1
+    - v2.5.4
+    - v2.6.2
+    - v2.6.3
+    - v2.7.0
+    - v2.7.1
+    - v3.0.1
+- source: docker.io/rancher/mirrored-cluster-api-controller
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-cluster-api-controller'
+  type: repository
+  tags:
+    allow:
+    - v1.4.4
+- source: docker.io/rancher/mirrored-coredns-coredns
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-coredns-coredns'
+  type: repository
+  tags:
+    allow:
+    - 1.6.2
+- source: docker.io/rancher/mirrored-coreos-kube-state-metrics
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-coreos-kube-state-metrics'
+  type: repository
+  tags:
+    allow:
+    - v1.9.7
+- source: docker.io/rancher/mirrored-coreos-prometheus-config-reloader
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-coreos-prometheus-config-reloader'
+  type: repository
+  tags:
+    allow:
+    - v0.38.1
+- source: docker.io/rancher/mirrored-coreos-prometheus-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-coreos-prometheus-operator'
+  type: repository
+  tags:
+    allow:
+    - v0.38.1
+- source: docker.io/rancher/mirrored-curlimages-curl
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-curlimages-curl'
+  type: repository
+  tags:
+    allow:
+    - 7.70.0
+    - 7.73.0
+    - 7.77.0
+    - 7.83.1
+    - 7.85.0
+- source: docker.io/rancher/mirrored-dexidp-dex
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-dexidp-dex'
+  type: repository
+  tags:
+    allow:
+    - v2.35.3
+    - v2.36.0
+- source: docker.io/rancher/mirrored-directxman12-k8s-prometheus-adapter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-directxman12-k8s-prometheus-adapter'
+  type: repository
+  tags:
+    allow:
+    - v0.8.3
+    - v0.8.4
+- source: docker.io/rancher/mirrored-directxman12-k8s-prometheus-adapter-amd64
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-directxman12-k8s-prometheus-adapter-amd64'
+  type: repository
+  tags:
+    allow:
+    - v0.7.0
+- source: docker.io/rancher/mirrored-epinio-epinio-server
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-epinio-epinio-server'
+  type: repository
+  tags:
+    allow:
+    - v1.2.0
+    - v1.6.2
+    - v1.8.1
+    - v1.9.0
+- source: docker.io/rancher/mirrored-epinio-epinio-ui
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-epinio-epinio-ui'
+  type: repository
+  tags:
+    allow:
+    - v1.2.0-0.0.1
+    - v1.5.1-0.0.3
+    - v1.8.1-0.0.1
+    - v1.9.0-0.0.3
+- source: docker.io/rancher/mirrored-epinio-epinio-unpacker
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-epinio-epinio-unpacker'
+  type: repository
+  tags:
+    allow:
+    - 1.0
+    - v1.6.2
+    - v1.8.1
+    - v1.9.0
+- source: docker.io/rancher/mirrored-fluent-fluent-bit
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-fluent-fluent-bit'
+  type: repository
+  tags:
+    allow:
+    - 1.6.10
+    - 1.6.10-debug
+    - 1.7.9
+    - 1.7.9-debug
+    - 1.8.15
+    - 1.8.15-debug
+    - 1.8.8
+    - 1.8.8-debug
+    - 1.8.9
+    - 1.8.9-debug
+    - 1.9.3
+    - 1.9.3-debug
+    - 1.9.5
+    - 1.9.5-debug
+- source: docker.io/rancher/mirrored-grafana-grafana
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-grafana-grafana'
+  type: repository
+  tags:
+    allow:
+    - 7.1.5
+    - 7.4.5
+    - 7.5.11
+    - 7.5.8
+    - 9.1.5
+- source: docker.io/rancher/mirrored-grafana-grafana-image-renderer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-grafana-grafana-image-renderer'
+  type: repository
+  tags:
+    allow:
+    - 2.0.1
+    - 3.0.1
+- source: docker.io/rancher/mirrored-idealista-prom2teams
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-idealista-prom2teams'
+  type: repository
+  tags:
+    allow:
+    - 3.2.1
+    - 3.2.2
+    - 3.2.3
+    - 4.2.0
+    - 4.2.1
+- source: docker.io/rancher/mirrored-ingress-nginx-kube-webhook-certgen
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-ingress-nginx-kube-webhook-certgen'
+  type: repository
+  tags:
+    allow:
+    - v1.0
+    - v1.3.0
+- source: docker.io/rancher/mirrored-istio-coredns-plugin
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-istio-coredns-plugin'
+  type: repository
+  tags:
+    allow:
+    - 0.2-istio-1.1
+- source: docker.io/rancher/mirrored-istio-install-cni
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-istio-install-cni'
+  type: repository
+  tags:
+    allow:
+    - 1.10.4
+    - 1.11.4
+    - 1.11.7
+    - 1.11.8
+    - 1.12.6
+    - 1.13.3
+    - 1.14.1-distroless
+    - 1.14.3-distroless
+    - 1.15.3-distroless
+    - 1.16.3-distroless
+    - 1.17.2-distroless
+    - 1.18.2-distroless
+    - 1.8.3
+    - 1.8.5
+    - 1.8.6
+    - 1.9.3
+    - 1.9.5
+    - 1.9.6
+    - 1.9.8
+- source: docker.io/rancher/mirrored-istio-pilot
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-istio-pilot'
+  type: repository
+  tags:
+    allow:
+    - 1.10.4
+    - 1.11.4
+    - 1.11.7
+    - 1.11.8
+    - 1.12.6
+    - 1.13.3
+    - 1.14.1-distroless
+    - 1.14.3-distroless
+    - 1.15.3-distroless
+    - 1.16.3-distroless
+    - 1.17.2-distroless
+    - 1.18.2-distroless
+    - 1.8.3
+    - 1.8.5
+    - 1.8.6
+    - 1.9.3
+    - 1.9.5
+    - 1.9.6
+    - 1.9.8
+- source: docker.io/rancher/mirrored-istio-proxyv2
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-istio-proxyv2'
+  type: repository
+  tags:
+    allow:
+    - 1.10.4
+    - 1.11.4
+    - 1.11.7
+    - 1.11.8
+    - 1.12.6
+    - 1.13.3
+    - 1.14.1-distroless
+    - 1.14.3-distroless
+    - 1.15.3-distroless
+    - 1.16.3-distroless
+    - 1.17.2-distroless
+    - 1.18.2-distroless
+    - 1.8.3
+    - 1.8.5
+    - 1.8.6
+    - 1.9.3
+    - 1.9.5
+    - 1.9.6
+    - 1.9.8
+- source: docker.io/rancher/mirrored-jaegertracing-all-in-one
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-jaegertracing-all-in-one'
+  type: repository
+  tags:
+    allow:
+    - 1.20.0
+    - 1.27.0
+    - 1.31.0
+    - 1.32.0
+    - 1.33.0
+    - 1.35.1
+    - 1.37.0
+    - 1.39.0
+    - 1.42.0
+    - 1.43.0
+    - 1.47.0
+- source: docker.io/rancher/mirrored-jettech-kube-webhook-certgen
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-jettech-kube-webhook-certgen'
+  type: repository
+  tags:
+    allow:
+    - v1.2.1
+    - v1.5.0
+    - v1.5.2
+- source: docker.io/rancher/mirrored-jimmidyson-configmap-reload
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-jimmidyson-configmap-reload'
+  type: repository
+  tags:
+    allow:
+    - v0.3.0
+    - v0.4.0
+    - v0.8.0
+- source: docker.io/rancher/mirrored-k8scsi-csi-attacher
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-k8scsi-csi-attacher'
+  type: repository
+  tags:
+    allow:
+    - v3.0.0
+    - v3.1.0
+- source: docker.io/rancher/mirrored-k8scsi-csi-node-driver-registrar
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-k8scsi-csi-node-driver-registrar'
+  type: repository
+  tags:
+    allow:
+    - v2.0.1
+    - v2.1.0
+- source: docker.io/rancher/mirrored-k8scsi-csi-provisioner
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-k8scsi-csi-provisioner'
+  type: repository
+  tags:
+    allow:
+    - v2.0.0
+    - v2.1.0
+- source: docker.io/rancher/mirrored-k8scsi-csi-resizer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-k8scsi-csi-resizer'
+  type: repository
+  tags:
+    allow:
+    - v1.0.0
+    - v1.1.0
+- source: docker.io/rancher/mirrored-k8scsi-livenessprobe
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-k8scsi-livenessprobe'
+  type: repository
+  tags:
+    allow:
+    - v2.1.0
+    - v2.2.0
+- source: docker.io/rancher/mirrored-kiali-kiali
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-kiali-kiali'
+  type: repository
+  tags:
+    allow:
+    - v1.29.0
+    - v1.32.0
+    - v1.35.0
+    - v1.41.0
+    - v1.44.0
+    - v1.50.0
+    - v1.52.0
+    - v1.55.0
+    - v1.59.0
+    - v1.63.2
+    - v1.66.0
+    - v1.67.0
+- source: docker.io/rancher/mirrored-kiwigrid-k8s-sidecar
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-kiwigrid-k8s-sidecar'
+  type: repository
+  tags:
+    allow:
+    - 0.1.151
+    - 1.10.7
+    - 1.12.2
+    - 1.12.3
+    - 1.15.9
+    - 1.19.2
+- source: docker.io/rancher/mirrored-kube-rbac-proxy
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-kube-rbac-proxy'
+  type: repository
+  tags:
+    allow:
+    - v0.5.0
+- source: docker.io/rancher/mirrored-kube-state-metrics-kube-state-metrics
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-kube-state-metrics-kube-state-metrics'
+  type: repository
+  tags:
+    allow:
+    - v1.9.8
+    - v2.0.0
+    - v2.2.0
+    - v2.6.0
+- source: docker.io/rancher/mirrored-library-busybox
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-library-busybox'
+  type: repository
+  tags:
+    allow:
+    - 1.31.1
+- source: docker.io/rancher/mirrored-library-nginx
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-library-nginx'
+  type: repository
+  tags:
+    allow:
+    - 1.19.2-alpine
+    - 1.21.1-alpine
+    - 1.23.0-alpine
+    - 1.23.2-alpine
+    - 1.24.0-alpine
+- source: docker.io/rancher/mirrored-library-registry
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-library-registry'
+  type: repository
+  tags:
+    allow:
+    - 2.8.1
+- source: docker.io/rancher/mirrored-longhornio-backing-image-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-backing-image-manager'
+  type: repository
+  tags:
+    allow:
+    - v1.4.0
+    - v1.4.1
+    - v1.4.2
+    - v1.4.3
+    - v1.5.1
+    - v1_20210422
+    - v1_20210422_patch1
+    - v2_20210820
+    - v2_20210820_patch1
+    - v2_20221027
+    - v3_20220609
+    - v3_20220808
+    - v3_20221003
+    - v3_20230320
+- source: docker.io/rancher/mirrored-longhornio-csi-attacher
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-csi-attacher'
+  type: repository
+  tags:
+    allow:
+    - v2.2.1-lh1
+    - v2.2.1-lh2
+    - v3.2.1
+    - v3.4.0
+    - v4.2.0
+- source: docker.io/rancher/mirrored-longhornio-csi-node-driver-registrar
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-csi-node-driver-registrar'
+  type: repository
+  tags:
+    allow:
+    - v1.2.0-lh1
+    - v2.3.0
+    - v2.5.0
+    - v2.7.0
+- source: docker.io/rancher/mirrored-longhornio-csi-provisioner
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-csi-provisioner'
+  type: repository
+  tags:
+    allow:
+    - v1.6.0-lh1
+    - v1.6.0-lh2
+    - v2.1.2
+    - v3.4.1
+- source: docker.io/rancher/mirrored-longhornio-csi-resizer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-csi-resizer'
+  type: repository
+  tags:
+    allow:
+    - v0.5.1-lh1
+    - v0.5.1-lh2
+    - v1.2.0
+    - v1.3.0
+    - v1.7.0
+- source: docker.io/rancher/mirrored-longhornio-csi-snapshotter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-csi-snapshotter'
+  type: repository
+  tags:
+    allow:
+    - v2.1.1-lh1
+    - v2.1.1-lh2
+    - v3.0.3
+    - v5.0.1
+    - v6.2.1
+- source: docker.io/rancher/mirrored-longhornio-livenessprobe
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-livenessprobe'
+  type: repository
+  tags:
+    allow:
+    - v2.8.0
+    - v2.9.0
+- source: docker.io/rancher/mirrored-longhornio-longhorn-engine
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-longhorn-engine'
+  type: repository
+  tags:
+    allow:
+    - v1.1.0
+    - v1.1.1
+    - v1.1.2
+    - v1.1.3
+    - v1.2.2
+    - v1.2.3
+    - v1.2.4
+    - v1.2.5
+    - v1.2.6
+    - v1.3.0
+    - v1.3.1
+    - v1.3.2
+    - v1.3.3
+    - v1.4.0
+    - v1.4.1
+    - v1.4.2
+    - v1.4.3
+    - v1.5.1
+- source: docker.io/rancher/mirrored-longhornio-longhorn-instance-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-longhorn-instance-manager'
+  type: repository
+  tags:
+    allow:
+    - v1.4.0
+    - v1.4.1
+    - v1.4.2
+    - v1.4.3
+    - v1.5.1
+    - v1_20201216
+    - v1_20210621
+    - v1_20210731
+    - v1_20211210
+    - v1_20220303
+    - v1_20220303_patch1
+    - v1_20220303_patch2
+    - v1_20220611
+    - v1_20220808
+    - v1_20221003
+    - v1_20230407
+- source: docker.io/rancher/mirrored-longhornio-longhorn-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-longhorn-manager'
+  type: repository
+  tags:
+    allow:
+    - v1.1.0
+    - v1.1.1
+    - v1.1.2
+    - v1.1.3
+    - v1.2.2
+    - v1.2.3
+    - v1.2.4
+    - v1.2.5
+    - v1.2.6
+    - v1.3.0
+    - v1.3.1
+    - v1.3.2
+    - v1.3.3
+    - v1.4.0
+    - v1.4.1
+    - v1.4.2
+    - v1.4.3
+    - v1.5.1
+- source: docker.io/rancher/mirrored-longhornio-longhorn-share-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-longhorn-share-manager'
+  type: repository
+  tags:
+    allow:
+    - v1.4.0
+    - v1.4.1
+    - v1.4.2
+    - v1.4.3
+    - v1.5.1
+    - v1_20201204
+    - v1_20210416
+    - v1_20210416_patch1
+    - v1_20210914
+    - v1_20211020
+    - v1_20211020_patch1
+    - v1_20211020_patch2
+    - v1_20220531
+    - v1_20220808
+    - v1_20221003
+    - v1_20230320
+- source: docker.io/rancher/mirrored-longhornio-longhorn-ui
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-longhorn-ui'
+  type: repository
+  tags:
+    allow:
+    - v1.1.0
+    - v1.1.1
+    - v1.1.2
+    - v1.1.3
+    - v1.2.2
+    - v1.2.3
+    - v1.2.4
+    - v1.2.5
+    - v1.2.6
+    - v1.3.0
+    - v1.3.1
+    - v1.3.2
+    - v1.3.3
+    - v1.4.0
+    - v1.4.1
+    - v1.4.2
+    - v1.4.3
+    - v1.5.1
+- source: docker.io/rancher/mirrored-longhornio-support-bundle-kit
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-longhornio-support-bundle-kit'
+  type: repository
+  tags:
+    allow:
+    - v0.0.17
+    - v0.0.19
+    - v0.0.24
+    - v0.0.25
+- source: docker.io/rancher/mirrored-messagebird-sachet
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-messagebird-sachet'
+  type: repository
+  tags:
+    allow:
+    - 0.2.3
+    - 0.2.6
+    - 0.3.1
+- source: docker.io/rancher/mirrored-minio-mc
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-minio-mc'
+  type: repository
+  tags:
+    allow:
+    - RELEASE.2022-05-09T04-08-26Z
+    - RELEASE.2022-12-13T00-23-28Z
+    - RELEASE.2023-01-28T20-29-38Z
+    - RELEASE.2023-06-28T21-54-17Z
+- source: docker.io/rancher/mirrored-minio-minio
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-minio-minio'
+  type: repository
+  tags:
+    allow:
+    - RELEASE.2022-05-08T23-50-31Z
+    - RELEASE.2022-12-12T19-27-27Z
+    - RELEASE.2023-02-10T18-48-39Z
+    - RELEASE.2023-07-07T07-13-57Z
+- source: docker.io/rancher/mirrored-neuvector-controller
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-neuvector-controller'
+  type: repository
+  tags:
+    allow:
+    - 5.0.0
+    - 5.0.2
+    - 5.0.3
+    - 5.0.4
+    - 5.1.1
+    - 5.1.2
+    - 5.1.3
+    - 5.2.0
+    - 5.2.1
+    - 5.2.2-s1
+- source: docker.io/rancher/mirrored-neuvector-enforcer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-neuvector-enforcer'
+  type: repository
+  tags:
+    allow:
+    - 5.0.0
+    - 5.0.2
+    - 5.0.3
+    - 5.0.4
+    - 5.1.1
+    - 5.1.2
+    - 5.1.3
+    - 5.2.0
+    - 5.2.1
+    - 5.2.2-s1
+- source: docker.io/rancher/mirrored-neuvector-manager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-neuvector-manager'
+  type: repository
+  tags:
+    allow:
+    - 5.0.0
+    - 5.0.2
+    - 5.0.3
+    - 5.0.4
+    - 5.1.1
+    - 5.1.2
+    - 5.1.3
+    - 5.2.0
+    - 5.2.1
+    - 5.2.2-s1
+- source: docker.io/rancher/mirrored-neuvector-prometheus-exporter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-neuvector-prometheus-exporter'
+  type: repository
+  tags:
+    allow:
+    - 5.2.0
+    - 5.2.1
+    - 5.2.2
+- source: docker.io/rancher/mirrored-neuvector-registry-adapter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-neuvector-registry-adapter'
+  type: repository
+  tags:
+    allow:
+    - 0.1.0
+    - 0.1.1-s1
+- source: docker.io/rancher/mirrored-neuvector-scanner
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-neuvector-scanner'
+  type: repository
+  tags:
+    allow:
+    - latest
+- source: docker.io/rancher/mirrored-neuvector-updater
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-neuvector-updater'
+  type: repository
+  tags:
+    allow:
+    - latest
+- source: docker.io/rancher/mirrored-openpolicyagent-gatekeeper
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-openpolicyagent-gatekeeper'
+  type: repository
+  tags:
+    allow:
+    - v3.10.0
+    - v3.12.0
+    - v3.3.0
+    - v3.5.1
+    - v3.6.0
+    - v3.7.1
+    - v3.8.1
+    - v3.9.0
+- source: docker.io/rancher/mirrored-openpolicyagent-gatekeeper-crds
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-openpolicyagent-gatekeeper-crds'
+  type: repository
+  tags:
+    allow:
+    - v3.10.0
+    - v3.12.0
+    - v3.6.0
+    - v3.7.1
+    - v3.8.1
+    - v3.9.0
+- source: docker.io/rancher/mirrored-paketobuildpacks-builder
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-paketobuildpacks-builder'
+  type: repository
+  tags:
+    allow:
+    - 0.2.289-full
+    - 0.2.407-full
+    - 0.2.441-full
+    - 0.2.95-full
+- source: docker.io/rancher/mirrored-prom-alertmanager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prom-alertmanager'
+  type: repository
+  tags:
+    allow:
+    - v0.21.0
+- source: docker.io/rancher/mirrored-prom-node-exporter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prom-node-exporter'
+  type: repository
+  tags:
+    allow:
+    - v1.0.1
+- source: docker.io/rancher/mirrored-prom-prometheus
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prom-prometheus'
+  type: repository
+  tags:
+    allow:
+    - v2.18.2
+- source: docker.io/rancher/mirrored-prometheus-adapter-prometheus-adapter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prometheus-adapter-prometheus-adapter'
+  type: repository
+  tags:
+    allow:
+    - v0.10.0
+    - v0.9.0
+- source: docker.io/rancher/mirrored-prometheus-alertmanager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prometheus-alertmanager'
+  type: repository
+  tags:
+    allow:
+    - v0.22.2
+    - v0.24.0
+- source: docker.io/rancher/mirrored-prometheus-node-exporter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prometheus-node-exporter'
+  type: repository
+  tags:
+    allow:
+    - v1.1.2
+    - v1.2.2
+    - v1.3.1
+- source: docker.io/rancher/mirrored-prometheus-operator-prometheus-config-reloader
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prometheus-operator-prometheus-config-reloader'
+  type: repository
+  tags:
+    allow:
+    - v0.46.0
+    - v0.48.0
+    - v0.50.0
+    - v0.59.1
+- source: docker.io/rancher/mirrored-prometheus-operator-prometheus-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prometheus-operator-prometheus-operator'
+  type: repository
+  tags:
+    allow:
+    - v0.46.0
+    - v0.48.0
+    - v0.50.0
+    - v0.59.1
+- source: docker.io/rancher/mirrored-prometheus-prometheus
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-prometheus-prometheus'
+  type: repository
+  tags:
+    allow:
+    - v2.24.0
+    - v2.27.1
+    - v2.28.1
+    - v2.38.0
+- source: docker.io/rancher/mirrored-s3gw-s3gw
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-s3gw-s3gw'
+  type: repository
+  tags:
+    allow:
+    - v0.14.0
+- source: docker.io/rancher/mirrored-sig-storage-csi-attacher
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-sig-storage-csi-attacher'
+  type: repository
+  tags:
+    allow:
+    - latest
+    - v3.2.0
+    - v3.3.0
+    - v3.4.0
+    - v3.5.0
+    - v4.2.0
+- source: docker.io/rancher/mirrored-sig-storage-csi-node-driver-registrar
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-sig-storage-csi-node-driver-registrar'
+  type: repository
+  tags:
+    allow:
+    - latest
+    - v2.3.0
+    - v2.5.0
+    - v2.5.1
+    - v2.6.2
+    - v2.7.0
+- source: docker.io/rancher/mirrored-sig-storage-csi-provisioner
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-sig-storage-csi-provisioner'
+  type: repository
+  tags:
+    allow:
+    - latest
+    - v2.2.0
+    - v3.0.0
+    - v3.1.0
+    - v3.2.1
+    - v3.3.0
+    - v3.4.0
+- source: docker.io/rancher/mirrored-sig-storage-csi-resizer
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-sig-storage-csi-resizer'
+  type: repository
+  tags:
+    allow:
+    - latest
+    - v1.3.0
+    - v1.4.0
+    - v1.6.0
+    - v1.7.0
+- source: docker.io/rancher/mirrored-sig-storage-livenessprobe
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-sig-storage-livenessprobe'
+  type: repository
+  tags:
+    allow:
+    - latest
+    - v2.4.0
+    - v2.6.0
+    - v2.7.0
+    - v2.8.0
+    - v2.9.0
+- source: docker.io/rancher/mirrored-sigwindowstools-k8s-gmsa-webhook
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-sigwindowstools-k8s-gmsa-webhook'
+  type: repository
+  tags:
+    allow:
+    - v0.3.0
+- source: docker.io/rancher/mirrored-skopeo-skopeo
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-skopeo-skopeo'
+  type: repository
+  tags:
+    allow:
+    - v1.10.0
+- source: docker.io/rancher/mirrored-sonobuoy-sonobuoy
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-sonobuoy-sonobuoy'
+  type: repository
+  tags:
+    allow:
+    - v0.16.3
+    - v0.53.2
+    - v0.56.16
+    - v0.56.7
+- source: docker.io/rancher/mirrored-squareup-ghostunnel
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-squareup-ghostunnel'
+  type: repository
+  tags:
+    allow:
+    - v1.5.2
+- source: docker.io/rancher/mirrored-thanos-thanos
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/mirrored-thanos-thanos'
+  type: repository
+  tags:
+    allow:
+    - v0.17.2
+    - v0.28.0
+- source: docker.io/rancher/openpolicyagent-gatekeeper
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/openpolicyagent-gatekeeper'
+  type: repository
+  tags:
+    allow:
+    - v3.1.1
+    - v3.2.1
+- source: docker.io/rancher/prom-alertmanager
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/prom-alertmanager'
+  type: repository
+  tags:
+    allow:
+    - v0.21.0
+- source: docker.io/rancher/prom-node-exporter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/prom-node-exporter'
+  type: repository
+  tags:
+    allow:
+    - v1.0.1
+- source: docker.io/rancher/prom-prometheus
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/prom-prometheus'
+  type: repository
+  tags:
+    allow:
+    - v2.18.2
+- source: docker.io/rancher/prometheus-federator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/prometheus-federator'
+  type: repository
+  tags:
+    allow:
+    - v0.1.0
+    - v0.2.1
+    - v0.3.0
+    - v0.3.2
+- source: docker.io/rancher/pushprox-client
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/pushprox-client'
+  type: repository
+  tags:
+    allow:
+    - v0.1.0-rancher1-client
+    - v0.1.0-rancher2-client
+- source: docker.io/rancher/pushprox-proxy
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/pushprox-proxy'
+  type: repository
+  tags:
+    allow:
+    - v0.1.0-rancher1-proxy
+    - v0.1.0-rancher2-proxy
+- source: docker.io/rancher/rancher-agent
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/rancher-agent'
+  type: repository
+  tags:
+    allow:
+    - v2.4.8
+    - v2.5.7
+- source: docker.io/rancher/rancher-csp-adapter
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/rancher-csp-adapter'
+  type: repository
+  tags:
+    allow:
+    - v1.0.0
+    - v1.0.1
+    - v2.0.0
+    - v2.0.1
+    - v2.0.2
+- source: docker.io/rancher/rancher-webhook
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/rancher-webhook'
+  type: repository
+  tags:
+    allow:
+    - v0.1.0
+    - v0.1.0-beta5
+    - v0.1.0-beta7
+    - v0.1.0-beta9
+    - v0.1.1
+    - v0.1.2
+    - v0.1.3
+    - v0.1.4
+    - v0.1.5
+    - v0.1.6
+    - v0.2.0
+    - v0.2.1
+    - v0.2.10
+    - v0.2.2
+    - v0.2.5
+    - v0.2.6
+    - v0.2.7
+    - v0.2.9
+    - v0.3.0
+    - v0.3.2
+    - v0.3.3
+    - v0.3.4
+    - v0.3.5
+    - v0.3.6
+- source: docker.io/rancher/security-scan
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/security-scan'
+  type: repository
+  tags:
+    allow:
+    - v0.2.1
+    - v0.2.10
+    - v0.2.11
+    - v0.2.12
+    - v0.2.13
+    - v0.2.2
+    - v0.2.3
+    - v0.2.4
+    - v0.2.5
+    - v0.2.6
+    - v0.2.7
+    - v0.2.8
+    - v0.2.9
+- source: docker.io/rancher/shell
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/shell'
+  type: repository
+  tags:
+    allow:
+    - v0.1.14
+    - v0.1.18
+    - v0.1.19
+    - v0.1.19-rc8
+    - v0.1.8
+- source: docker.io/rancher/sonobuoy-sonobuoy
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/sonobuoy-sonobuoy'
+  type: repository
+  tags:
+    allow:
+    - v0.16.3
+- source: docker.io/rancher/squareup-ghostunnel
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/squareup-ghostunnel'
+  type: repository
+  tags:
+    allow:
+    - v1.5.2
+- source: docker.io/rancher/system-upgrade-controller
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/system-upgrade-controller'
+  type: repository
+  tags:
+    allow:
+    - v0.10.0
+    - v0.11.0
+    - v0.7.5
+    - v0.8.1
+    - v0.9.1
+- source: docker.io/rancher/tekton-utils
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/tekton-utils'
+  type: repository
+  tags:
+    allow:
+    - v0.1.0
+    - v0.1.1
+    - v0.1.11
+    - v0.1.2
+    - v0.1.22
+    - v0.1.3
+    - v0.1.33
+    - v0.1.5
+    - v0.1.6
+    - v0.1.7
+- source: docker.io/rancher/ui-plugin-operator
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/ui-plugin-operator'
+  type: repository
+  tags:
+    allow:
+    - v0.1.0
+    - v0.1.1
+- source: docker.io/rancher/windows_exporter-package
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/windows_exporter-package'
+  type: repository
+  tags:
+    allow:
+    - v0.0.1
+    - v0.0.2
+    - v0.0.3
+- source: docker.io/rancher/wins
+  target: '{{ env "REGISTRY_ENDPOINT" }}/rancher/wins'
+  type: repository
+  tags:
+    allow:
+    - v0.1.1