Formerly, it is accessible by authenticated users.
Now, it is accessible by cluster owners and authorized users/groups.

* important stuff: update README

* cis chart - initial version

* updating to use same image

* adding owner

* fixing the image name, version

Using Rancher repo instead of harbor repo.

Change all the repository in the istio to use rancher repo to pull the
image.

Problem:
Registry pod stuck in AttchVolumeFailed status on upgrade. Deadlock happens where the new pod waits the old pod to dettach the volume, and the old one waits for the new one to be ready.

Solution:
Set maxUnavailable to 1, so that the old pod can be released before the new pod is ready.

  * add istio and certmanager CRDs
  * add rancher system default registry config
  * add rancher proxy to the Grafana, Prometheus, Kiali and Tracing
  * remove not used demo values.yaml files and serviceGraph(deprecated)

Add globalRegistryMode to enable deploying the Harbor as a global
registry in Rancher. It use the same domain as Rancher server in
ingress rules, and use the same tls-rancher-ingress secret for TLS.

Co-authored-by: Guangbo <guangbo@rancher.com>
Co-authored-by: gitlawr <lawrleegle@gmail.com>

Do Helm lint validation and Helm unittest for the charts

Problem:
alertmanager 0.16.0 unable to send email notification without SMTP authentication
Solution:
upgrade to alertmanger 0.17.0 which solve this problem

Issue:
https://github.com/rancher/rancher/issues/20060

**Problem:**
Buffering proxy data causes client to receive slow

**Solution:**
Disable buffer via `proxy_buffering  off;` to response client directly

**Issue:**
https://github.com/rancher/rancher/issues/19689

**Problem:**
Upgrade the operator would have errors because we change the version of
the operator charts.

**Solution:**
Keep the old version 0.0.2 the operator used before.

**Problem:**
There are two kubelet scraping targets on Prometheus, one is scraping `/metrics`, another one is scraping `/metrics/cadvisor`.
The metrics from `/metrics` endpoint are not including `container_name`.
So the `container_*` expression will double the actual mount without
`conatiner_name!=""`

**Solution:**
Add `container_name!=""` into the expression

**Issue:**
https://github.com/rancher/rancher/issues/20162

**Problem:**
The `Flunetd` pane from `Rancher Components` dashboard cannot show
the right counting of fluentd Pods

**Solution:**
Change `sum(kube_pod_info{pod=~"fluentd.*"})` to `sum(kube_pod_info{pod=~".*fluentd.*",pod!~".*aggregator.*"})`

**Issue:**
https://github.com/rancher/rancher/issues/19722

Fix the issue that node exporter crash when deploying
into the node without internal ip.

Problem:
update configure reloader to mirrored rancher image, logging configure
secret has precan and generted data
Solution:
update configure reloader image, separate configure secret into two
secrets

Issue:
https://github.com/rancher/rancher/issues/19836

- Use project name & cluster name info from Values.global

- Embed operator as sub charts
    + Support to configure operator like other charts
    + Adjust operator default limit
- Add permission to kube-state exporter
- Replace localhost by 127.0.0.1 on prometheus-auth
- Increase Nginx proxy buffers
- Configure PVC name of Prometheus or Alertmanager
    + Allow to configure PVC name of Prometheus or Alertmanager via `prometheus.persistence.name` or `alertmanager.persistence.name`
- Adjust Cluster Monitoring scrape logic
    + Don't scrape Monitoring namespace on `prometheus-io-scrape` job
    + The rate to scrape is using global interval, the default is 60s
    + Remove useless Prometheus record rules

**Issue:**
- https://github.com/rancher/rancher/issues/19693
- https://github.com/rancher/rancher/issues/18830
- https://github.com/rancher/rancher/issues/19243
- https://github.com/rancher/rancher/issues/19689
- https://github.com/rancher/rancher/issues/19410
- https://github.com/rancher/rancher/issues/19248