* add istio and certmanager CRDs
  * add rancher system default registry config
  * add rancher proxy to the Grafana, Prometheus, Kiali and Tracing
  * remove not used demo values.yaml files and serviceGraph(deprecated)

Add globalRegistryMode to enable deploying the Harbor as a global
registry in Rancher. It use the same domain as Rancher server in
ingress rules, and use the same tls-rancher-ingress secret for TLS.

Co-authored-by: Guangbo <guangbo@rancher.com>
Co-authored-by: gitlawr <lawrleegle@gmail.com>

Do Helm lint validation and Helm unittest for the charts

Problem:
alertmanager 0.16.0 unable to send email notification without SMTP authentication
Solution:
upgrade to alertmanger 0.17.0 which solve this problem

Issue:
https://github.com/rancher/rancher/issues/20060

**Problem:**
Buffering proxy data causes client to receive slow

**Solution:**
Disable buffer via `proxy_buffering  off;` to response client directly

**Issue:**
https://github.com/rancher/rancher/issues/19689

**Problem:**
Upgrade the operator would have errors because we change the version of
the operator charts.

**Solution:**
Keep the old version 0.0.2 the operator used before.

**Problem:**
There are two kubelet scraping targets on Prometheus, one is scraping `/metrics`, another one is scraping `/metrics/cadvisor`.
The metrics from `/metrics` endpoint are not including `container_name`.
So the `container_*` expression will double the actual mount without
`conatiner_name!=""`

**Solution:**
Add `container_name!=""` into the expression

**Issue:**
https://github.com/rancher/rancher/issues/20162

**Problem:**
The `Flunetd` pane from `Rancher Components` dashboard cannot show
the right counting of fluentd Pods

**Solution:**
Change `sum(kube_pod_info{pod=~"fluentd.*"})` to `sum(kube_pod_info{pod=~".*fluentd.*",pod!~".*aggregator.*"})`

**Issue:**
https://github.com/rancher/rancher/issues/19722

Fix the issue that node exporter crash when deploying
into the node without internal ip.

Problem:
update configure reloader to mirrored rancher image, logging configure
secret has precan and generted data
Solution:
update configure reloader image, separate configure secret into two
secrets

Issue:
https://github.com/rancher/rancher/issues/19836

- Use project name & cluster name info from Values.global

- Embed operator as sub charts
    + Support to configure operator like other charts
    + Adjust operator default limit
- Add permission to kube-state exporter
- Replace localhost by 127.0.0.1 on prometheus-auth
- Increase Nginx proxy buffers
- Configure PVC name of Prometheus or Alertmanager
    + Allow to configure PVC name of Prometheus or Alertmanager via `prometheus.persistence.name` or `alertmanager.persistence.name`
- Adjust Cluster Monitoring scrape logic
    + Don't scrape Monitoring namespace on `prometheus-io-scrape` job
    + The rate to scrape is using global interval, the default is 60s
    + Remove useless Prometheus record rules

**Issue:**
- https://github.com/rancher/rancher/issues/19693
- https://github.com/rancher/rancher/issues/18830
- https://github.com/rancher/rancher/issues/19243
- https://github.com/rancher/rancher/issues/19689
- https://github.com/rancher/rancher/issues/19410
- https://github.com/rancher/rancher/issues/19248

**Problem:**
When we start nginx in our start-up script, the nginx process would
become the child process of start-up script process and not process 1.
In this case, the kill signal from kubelet/docker will be sent to
start-up script instead of nginx so the nginx process won't stop after
kill.

**Solution:**
Change the proxy command and let nginx start at process 1.

In system-charts, we need to use the `repository` and `tag` to define
container's image name. After that, we can collect them together and
provide an images list we need for system charts.

problem:
before fluentd 1.3.1 version can't support add client cert for fluentd output

Solution:
upgrade fluentd to 1.3.3, but the related kafka gem also upgrade small
version, tested fluentd and kafka after upgrade version

Issue:
https://github.com/rancher/rancher/issues/18396

- Adding checksum over secrets to ensure change in secrets upgrades deployment
- Using rancher image for ensuring airgap case works too
- Adding nodeSelector to ensure the workloads never schedule to the Windows node
- Adding resource limits
- Add private image registry for airgap case

We will be keeping up with the upstream chart
https://github.com/helm/charts/tree/master/stable/external-dns

**Problem:**
Cannot start "rules-configmap-reloader" container with 10Mi limit resource

**Solution:**
Update images:

- quay.io/coreos/prometheus-operator:v0.29.0 ->
rancher/coreos-prometheus-operator:v0.29.0
- quay.io/coreos/prometheus-config-reloader ->
rancher/coreos-prometheus-config-reloader:v0.29.0
- prom/alertmanager:v0.16.1 -> rancher/prom-alertmanager:v0.16.1
- prom/prometheus:v2.7.1 -> rancher/prom-prometheus:v2.7.1
- grafana/grafana:5.4.3 -> rancher/grafana-grafana:5.4.3
- prom/node-exporter:v0.17.0 -> rancher/prom-node-exporter:v0.17.0
- quay.io/coreos/kube-state-metrics:v1.5.0 ->
rancher/coreos-kube-state-metrics:v1.5.0

**Issue:**
- https://github.com/rancher/rancher/issues/17997
- https://github.com/rancher/rancher/issues/18353

**Problem:**
Enable logging and monitoring in `rancher/rancher:master`, but can't see fluentd metric

**Solution:**
Consist label and endpoint name in `system-chart/rancher-monitoring:v0.0.2``

**Issue:**
https://github.com/rancher/rancher/issues/18327

**Patch:**
https://github.com/rancher/system-charts/pull/17

Problem:
enable logging and moinitoring but can't see fluentd metric

Solution:
consist label and endpoint name

Issue:
https://github.com/rancher/rancher/issues/18327

Refactor & fix some issue for Monitoring

checking

**Issue:**
https://github.com/rancher/rancher/issues/18104

**Issues:**
https://github.com/rancher/rancher/issues/18166

**Problem:**
- Remote reader mode only allow `project-level` Prometheus to share the
metrics from `cluster-level` Prometheus
- Remote reader mode cannot save the namespace-related metrics from
`cluster-level` Prometheus

**Solution:**
- Add `prometheus.sync.mode` to choose
- Add a "federate" scrape job when deploying federation mode

**Issue:**
https://github.com/rancher/rancher/issues/17390