The edpm_podman role has several ways to configure container registries. These different ways both write to /etc/container/registries.conf, meaning that if both ways are enabled, they'll overwrite one another.

The 2 ways are using edpm_container_registries and the combination of edpm_podman_disconnected_ocp and edpm_podman_registries_conf.

The combination of edpm_podman_disconnected_ocp and edpm_podman_registries_conf should actually never be set by a user, as they are instead automatically generated for disconnected by image_registry.go from openstack-operator. However, this is already causing confusion as users are trying to set these variables as well.

The 2 different methods (and if there are others) should configure different files under /etc/containers/registries.conf.d instead of the single /etc/containers/registries.conf file.