Everything on your private registry requires a CentOS base image? What about public images? If you wanted to run elasticsearch or nginx, would your company policy be to build a custom nginx or elasticsearch container image?
Exactly we don't use public images, build everything on top of CentOS in house.
Are you essentially reverse-engineering popular images like mysql/mysql? Are you not running vendor products that might reference public images?