feat(chart): air-gap-friendly Odoo + Postgres image refs (B.10)

values.yaml

@@ -74,6 +74,26 @@ sizes:
       filestore: 50Gi
       database: 100Gi
 
+# imageMirror — air-gap support (audit B.10). When `registry` is
+# set, the chart prepends it to .Values.odoo.image AND
+# .Values.postgres.image references at template-render time. So an
+# air-gapped customer pointing at e.g. registry.example.com/dh-mirror
+# renders Odoo as registry.example.com/dh-mirror/odoo:18.0 instead
+# of Docker Hub's docker.io/library/odoo:18.0. Addon images already
+# pull from the cluster-local registry (registry.odoosky-system) by
+# Tower's image-build pipeline; this block covers the upstream Odoo
+# + Postgres images that bypass that pipeline.
+#
+# `pullSecret` names a K8s Secret in the instance namespace that
+# carries credentials for the mirror. Empty = anonymous pull (the
+# default; Docker Hub's library images don't need auth).
+#
+# Default empty = same behaviour as before this addition — Odoo +
+# Postgres images come from Docker Hub.
+imageMirror:
+  registry: ""
+  pullSecret: ""
+
 odoo:
   image: odoo
   tag: "18.0"