https://github.com/rancher/rancher/issues/24262

https://github.com/rancher/rancher/issues/23857

Bump coreos-kube-state-metrics version

To make monitoring work when hardening rules are applied.

Problem:
Fails to run nginx proxies, because user home directory is not owned by nginx user inside newer nginx-alpine images

Solution:
Mount emptyDir to the user home directory(/var/cache/nginx) so that it
is writable by the nginx user.
Also update UID from 100 to 101 to be consistent with upstream changes(https://github.com/nginxinc/docker-nginx/issues/218)

logging 0.1.2 -> 0.1.3
monitoring 0.0.4 -> 0.0.5

Copy the binary to the host before wins cli prc run

Add PSP and related role/rolebinding/SA resources to logging chart.
The PSP contains restricted rules + hostPath volume.
Also, remove unnecessary privileged escalation from log-aggregator.

**Problem:**
Could not distinguish Windows images from `values.yaml`

**Solution:**
- Add a new field `os` below field `image`
- Must indicate `os: windows` if the image is using in Windows cluster

https://github.com/rancher/rancher/issues/22788

Problem:
windows will throws error when the file already exist, which is different from linux

Solution:
change to use new-item

Issue:
https://github.com/rancher/rancher/issues/22679

- Bump Prometheus operator image version
- Sync upstream CRDs. Add PodMonitor and update the rest.(https://github.com/helm/charts/tree/master/stable/prometheus-operator/templates/prometheus-operator)
- Update ClusterRole

Related Upstream changes:
https://github.com/helm/charts/commit/6a94c082c2daf8be72ac241397d652993ad82a0b#diff-b9f481ac97524bfb24d27f62676dc143
https://github.com/helm/charts/commit/d58247103fafd5930792bb1fd3ac240547523200#diff-23b6255dfa711af76ad99181e2fb0464