Since the secrets path is only available inside the container, but the
systemd-run command is executed outside the container, it can't access
the secret path, therefore the file needs to be copied.

This patch fixes issues currently faced by longhorn, where the SELinux
policy denies a DAC_override for iscsid. Since I couldn't find on what
file it even tries to do this override, for now, this override to fix
unmountable volumes.

This patch should provide an automated backup for all postgresql
clusters in the cluster. This implementation is less than ideal, due to
technical sharing of backups among all namespaces, but for now, it's
better than no backup. There will be further work on separating these
backups, but it is what it is for now.

This patch explicitly configures the storage devices to use and adjusts
the replication factor for some volumes to be a bit easier on the overall
cluster.

This patch fixes the problem, that prometheus keeps alerts
around in the pending state, before actually triggering an
alert as "firing" this the query-exposer has to account for
that in order to be useful.

Since in the Kubernetes manifest the args are already escaped
quoting a string will just send the quotes to the application,
with the result that they cause problems, e.g. when suddenly
starting to query a string, instead of valid promql grammar as
happening here.

This patch moves the query from the query-exposer to the a
prometheus rule in order to reduce complexity for the
query-exposer.

This patch deploys the query-exposer to the cluster, providing
insight into the current alert situation and this way, allow
polled notifications.

This patch forces a fixed datasource uid, in order to make it
usable in Dashboards as code setups like the current cluster is
using. Since Grafana struggles with dynamically discovering
datasources that are not THE default datasource, despite being
used by different types

This patch fixes the failure of the script when trying to restore a missing
registries config.

This patch replaces almost all occations where Fedora 35 is used with the old
registry.fedoraproject.org/fedora registry and replaces it with the new
quay.io-based fedora repository and version 36.

The original intend was to use push notification, it didn't proof useful,
therefore this patch drops them entirely.