As a reseller of PMK, I want to be able to configure a single container image registry mirror endpoint in the customers PMK clusters from which all container images are pulled. This allows me to host the service endpoint and provide this single trusted endpoint to the customer for addition to their access control lists.