This patch removes elasticsearch from the mastodon container image, as
it's not used in production anyway. Therefore the removal will simplify
the upgrade process finally allowing an idempotent upgrade to 4.2.1.

This patch adjusts the tmp volume to be from type emtpyDir with medium
Memory be default, this will use more memory in the container, but
should provide an easier default for users.

Further it also introduces the tmp volume to the web containers, that
require it, in order to process media that is uploaded by users.

It's actually possible to use emptyDir, but only with the correct medium
therefore this new release adjust the documentation in values.yaml

This patch introduces and ephemeral volume in order to allow sidekiq to
do the media processing without the problem that emptydir causes due to
how the ruby tempfile libarary evaluates temp file locations. Therefore
a small volume is introduced that takes care of it instead.

Additionally it refactors some of the volume templates to reduce
repetition.

References:
https://kubernetes.io/docs/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes
https://microblog.shivering-isles.com/@sheogorath/111040613569754423

This patch fixes the quite patching PSS support of the existing chart
and sets security contexts properly.

This patch replaces the call of common.names.fullname with the local
helper implementation, that is functionally identical but doesn't
require another dependency.

This patch is needed to fully support disabling of redis authentication.
This allows to use the new defaults for the mastodon base deployment.
While it's probablky not recommended for a production deployment to
disable redis authentication, it doesn't hurt too much for a base
deployment.

Since no defaults change, it shouldn't matter anyway for users of this
chart.

This patch enables read-only filesystems on the mastodon-web container
and disables privilege escalation

This patch introduces a bunch of tests for subcharts, doing cross-chart
testing e.g. testing that service names and host configurations are
correct as well as the existence of expected password fields in secrets
and so on.

While writing these tests a bug with the redis passwor variable was
discovered and fixed.