anchor.diff:  
   [WARNING]
   ====
  -When the `allowedRegistries` parameter is defined, all registries including `registry.redhat.io` and `quay.io` are blocked unless explicitly listed. If using the parameter, declare source registries `registry.redhat.io` and `quay.io` as required by payload images within your environment, to prevent Pod failure. For disconnected clusters, mirror registries should also be added.
  +When the `allowedRegistries` parameter is defined, all registries including `registry.redhat.io` and `quay.io` are blocked unless explicitly listed. If using the parameter, declare source registries `registry.redhat.io` and `quay.io` as required by payload images within your environment, to prevent pod failure. For disconnected clusters, mirror registries should also be added.
   ====
   
   The `status` field of the `image.config.openshift.io/cluster` resource holds
  
positive.code: field in ImageStreams. The value must be in `hostname[:port]` format.
  
  |`registrySources`
  |Holds cluster-wide information about how to handle the registries config.
  
  `insecureRegistries`: Registries which do not have a valid TLS certificate or
  only support HTTP connections.
  
negative.code: ConfigMap is to use the registry hostname as the key, and the PEM-encoded
  certificate as the value, for each additional registry CA to trust.
  
  |`externalRegistryHostnames`
  |`externalRegistryHostnames`: Provides the hostnames for the default external
  image registry. The external hostname should be set only when the image registry
  