Comment 1 for bug 1942134

Hmm, it would confirm my earlier observation that, while the mirror caches images, it still asks DockerHub about them each time, causing the quota to deplete. Sad.

Anyhow, yes; it's generally recommended for production to entirely control your images, i.e., build them yourself using Kolla (kolla-build command) and publish to a locally-controlled registry.

For the registry I use Harbor: https://goharbor.io/
It's quite popular and works well.

As for building the images: https://docs.openstack.org/kolla/latest/admin/image-building.html