This reverts commit 342a9382.

Since the secrets path is only available inside the container, but the
systemd-run command is executed outside the container, it can't access
the secret path, therefore the file needs to be copied.

This patch fixes issues currently faced by longhorn, where the SELinux
policy denies a DAC_override for iscsid. Since I couldn't find on what
file it even tries to do this override, for now, this override to fix
unmountable volumes.

This patch should provide an automated backup for all postgresql
clusters in the cluster. This implementation is less than ideal, due to
technical sharing of backups among all namespaces, but for now, it's
better than no backup. There will be further work on separating these
backups, but it is what it is for now.

This patch explicitly configures the storage devices to use and adjusts
the replication factor for some volumes to be a bit easier on the overall
cluster.

This patch fixes the problem, that prometheus keeps alerts
around in the pending state, before actually triggering an
alert as "firing" this the query-exposer has to account for
that in order to be useful.

Since in the Kubernetes manifest the args are already escaped
quoting a string will just send the quotes to the application,
with the result that they cause problems, e.g. when suddenly
starting to query a string, instead of valid promql grammar as
happening here.