This mitigates a scenario such as rancher/rancher#25907 that may need to pull down a fixed upgrade/prepare image to be able to successfully apply the upgrade.

- picks up rancher/system-upgrade-controller#48 to mitigate rancher/rancher#25882
- bumps backofflimit up to 99 (whole lotta retries)

cis changes

Istio 1.4.6

Istio 1.4.600

OPA Gatekeeper system chart

Changes done to support private image registry for airgap case, nodeSelector to filter out  Windows node

review changes

adding Rancher min version to questions.yaml

Review changes

System upgrade controller

Fix route53 global dns providers

This commit adds https://github.com/helm/charts/pull/19839 to our
rancher chart

**Problem:**
Duplicate measure in `container_*` metrics when scraping >=v1.16 kubelet
endpoint in TLS: the bottom `metricRelabelings` would replace the top
one.

**Solution:**
Merge both two `metricRelabelings` in TLS scraping, and fix wrong `labeldrop`
when scraping in non-TLS.

Addresses: https://github.com/rancher/rancher/issues/24751

With termination grace period set to 0, the pod is terminated
immediately which reduces the probability of collision. Also,
checks are added on rancher side as well to check for pods
from previous scan

Update external-dns to v0.6.0

Istio 1.4.4

Istio 1.4.4

Istio 1.4.400

Support read/write from/to remote endpoints and health check configuration

v2.3.5

Add upgrade hook to new istio CRD

Istio 1.4.300

I know, the version looks wierd. But we needed to version our
chart without making it terribly confusing for end users and also
sticking to semver.