1- Proposed title of this feature request

 [RFE] Add an option to block the ImagePull from "Source" registry if the ICSP/IDMS is configured in the cluster.

2- What is the nature and description of the request?

Currently if we are not adding the "Source" registries which is mentioned in the IDMS/ICSP in the allowedRegistries of the "Image" CR, the pull from the respective mirror also will fail due to rejected by policy as those "Source" registries having a by default reject policy in /etc/containers/policy.json

3. Why does the customer need this? (List the business requirements here)

As a fallback mechanism if the images is not present in the mirror registry the ImagePull will redirected to "Source" registry. so customer is looking for option to block the ImagePull from the source ( its valid if the Source registries are reachable from the cluster)

4. List any affected packages or components.

crio/kubelet