This patch is a first try to move my blog into the cluster. There is still quite
some refinement to do.

This patch enforces the Kubernetes baseline security from the new Pod
security standards (PSS) for all apps namespaces. While not considered ideal,
it'll help to improve security and also provide warnings where to adjust
existing workloads to fit the restricted PSS.

References:
https://kubernetes.io/docs/concepts/security/pod-security-standards/

This patch resolves some downtime of forecastle and oauth pods, after
enforcing the new Pod Security Standards. Given that restricted requires
explicit definition of a lot of fields, this shall be sorted ober time,
and not on the Spot.

References:
https://kubernetes.io/docs/concepts/security/pod-security-standards/#baseline

This patch deploys the MoK helm chart using GitOps to the k8s01 cluster.

This patch did not have the expected effect, therefore it's removed
again.

This reverts commit a30a13ba.

It seems that DNS lookups fail for whatever reasons since the update to
Kubernets 1.22 and result in inaccessiblity of some services. It seems
to be related to ndots, so let's fix it like this?

This patch adds a new service-account that is used by flux to deploy
harbor to the namespace. This reduces the risk if the helm chart
contains any malicious objects to be contained in the namespace.