This patch moves the config into the `registries.conf.d` directory and
recovers from the old mistake by reinstalling the package providing
`registries.conf`.

This patch fixes the problem of not deploying the crio config plan
anywhere due to the lack of a nodeselector. system-upgrades-controller
does rather nothing than everything and therefore no nodeselector, means
no targets instead of everything.

This reverts commit 567a8a37.

Currently the ingress controller is complaining about being unable to
find the default backend, maybe disabling it, will it make go away,
being disabled is the default.

This patch makes sure that deployments no longer hang on multi-attach
errors, like the did just now. Using the recreate strategy should ensure
that storage mappings work out properly.

This patch adds the secret names for goharbor into the helm values,
since the `secret` source requires to specify them explicitly.

This patch fixes the mistake of a bad read of the README for the harbor
helm chart, which stated that one should use "secret" for cert-manager
but directly followed by a third option "none", which was mistakenly
considered to be referred to.

This patch should removed the self-signed certificate from harbor

This patch adjust the commit-before-save mistake about the kustomize
config

The keys in the `.sops.yaml` file have to be comma separated

chore(deps): update helm release ingress-nginx to v4.0.16

See merge request !12

chore(deps): update helm release kube-prometheus-stack to v30

See merge request !5

This patch resolves the issues with the bootloop caused by the wrong
implementation of `needs-restarting`, which returns a list of apps, that
needs to be restarted. However, without the `--reboothint` parameter,
it'll fail to indicate the reboot requirement using an exit code.

Therefore the loop was always true and resulted in a reboot loop.

Revert policies as well, just to be safe.

This reverts commit ea44332b.

Turns out kyverno doesn't like its new version, since the deployments
have the wrong name. Needs some further investigation.

This reverts commit fca00b09.

This patch replaces the registry used to pull calico images with quay.io
since docker hub complaints about rate limits