As seen in CRW-869, falling behind on CVE updates because we hardcode the version of UBI8-minimal, postgres96, and RH SSO can have some nasty consequences.

So where all 23 images can be easily checked using updateBaseImages.sh script, and with some effort we can use that for rhel.Dockerfiles in upstream repos, we have nothing in place to address old image refs in the operator and operator-metadata containers' relatedImages.

Therefore we need to implement something in the two sync jobs for operator that will ensure that:

• content in upstream is replaced with the latest CRW requirement (eg., switch from keycloak to rhsso)
• latest tag is used in relatedImages and test scripts

Affected jobs:

• https://codeready-workspaces-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/view/CRW_CI/view/Releng/job/crw-operator_sync-github-to-pkgs.devel-pipeline/
• https://codeready-workspaces-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/view/CRW_CI/view/Releng/job/crw-operator-metadata_sync-github-to-pkgs.devel-pipeline/