Description of problem:

Prerequisites (if any, like setup, operators/versions):

Steps to Reproduce

On a ClusterBot cluster created with either `launch 4.18` or `rosa create 4.18 ...`, run from the main branch of the Operator:

.rhdh/scripts/prepare-restricted-environment.sh

1. <steps>

Actual results:

After some time, the script will error out when it attempts to create an ImageDigestMirrorSet resource in the cluster:

The imagedigestmirrorsets "rhdh-idms" is invalid: : ValidatingAdmissionPolicy 'mirror' with binding 'mirror-binding' denied request: This resource cannot be created, updated, or deleted. Please ask your administrator to modify the resource in the HostedCluster object.

Actually, if we try to manually create an IDMS cluster in the same cluster, it would fail with the same error. But this works on 4.17. So it looks like this validation was introduced in ROSA/HyperShift 4.18.

$ cat <<EOF | kubectl apply -f -
apiVersion: config.openshift.io/v1
kind: ImageDigestMirrorSet
metadata:
  name: rhdh-idms-test-1
spec:
  imageDigestMirrors:
    - mirrors:
      - quay.io/rhdh
      source: registry.redhat.io/rhdh
EOF

The imagedigestmirrorsets "rhdh-idms-test-1" is invalid: : ValidatingAdmissionPolicy 'mirror' with binding 'mirror-binding' denied request: This resource cannot be created, updated, or deleted. Please ask your administrator to modify the resource in the HostedCluster object.

Expected results:

It should work.

The IDMS/ICSP resources actually never seemed to work on ROSA clusters, so I think this issue can be quickly fixed by making the script skip their creation for such clusters..
It shouldn't have any impact, I think, on ROSA clusters.
We didn't skip them previously because they could still be created.

Reproducibility (Always/Intermittent/Only Once):

Always

Build Details:

Additional info (Such as Logs, Screenshots, etc):

Full logs attached.