- Bump Prometheus operator image version
- Sync upstream CRDs. Add PodMonitor and update the rest.(https://github.com/helm/charts/tree/master/stable/prometheus-operator/templates/prometheus-operator)
- Update ClusterRole

Related Upstream changes:
https://github.com/helm/charts/commit/6a94c082c2daf8be72ac241397d652993ad82a0b#diff-b9f481ac97524bfb24d27f62676dc143
https://github.com/helm/charts/commit/d58247103fafd5930792bb1fd3ac240547523200#diff-23b6255dfa711af76ad99181e2fb0464

Note:
See https://kubernetes.io/blog/2019/07/18/api-deprecations-in-1-16/
- PSP is introduced in policy apigroup in 1.10, and removed from extensions apigroup in 1.16.
- DaemonSet, Deployment, StatefulSet, and ReplicaSet migrate to apps in 1.9, and no longer be served from extensions in 1.16
- Ingress is migrated to networking.k8s.io in 1.14, and will be removed from extensions in 1.18

Changes:
1. fluentd: add sub charts fluentd-linux and fluentd-:windows
2. log-aggregator: remove useless service account
3. log-aggregator: add sub charts log-aggregator-linux and
log-aggregator-windows

Problem:
Fail to enable monitoring on restricted PSP clusters.

Solution:
1. Update grafana to run as grafana user.
2. Update nginx sidecars to run as nginx user, move files to the user
home directory(/var/cache/nginx) and listen on non privileged 8080 port.
With 1 & 2, project monitoring works in restricted clusters out of the
box.
3. Add necessary PSP/role/rb resource to node-exporter, which is used by
cluster monitoring.

Problem:
New add charts operator-init lack of linux node selector and tolerations

Solution:
Improve node selector and tolerations

Problem:
can't get windows container/node metrics

Solution:
1. deploy windows node exporter
2. add add windows metrics service, endpoint, service monitor
3. add metric relabel rules to unify windows and linux expression

Issue:
https://github.com/rancher/rancher/issues/20513
https://github.com/rancher/rancher/issues/20076
https://github.com/rancher/rancher/issues/20122

Problem:
current elasticsearch gems has warning log for elasticsearch 7.x, rancher/fluentd have release new version

Solution:
upgrade fluentd, elasticsearch etc gems version

Issue:
https://github.com/rancher/rancher/issues/20450
https://github.com/rancher/rancher/issues/20509

Problem:
Daemonset api version extensions/v1beta1 is deperated in 1.16

Solution:
Use the capabilities API versions defined in template

Issue:
https://github.com/rancher/rancher/issues/21770

Problem:
now filename only allow numbers and letter

Solution:
change regex expression to allow all charaters

Issue:
https://github.com/rancher/rancher/issues/17022

Formerly, it is accessible by authenticated users.
Now, it is accessible by cluster owners and authorized users/groups.

* important stuff: update README

* cis chart - initial version

* updating to use same image

* adding owner

* fixing the image name, version

Using Rancher repo instead of harbor repo.

Change all the repository in the istio to use rancher repo to pull the
image.

Problem:
Registry pod stuck in AttchVolumeFailed status on upgrade. Deadlock happens where the new pod waits the old pod to dettach the volume, and the old one waits for the new one to be ready.

Solution:
Set maxUnavailable to 1, so that the old pod can be released before the new pod is ready.