Now that we only watch/update managed components, we should allow
user to specify Helm values for user deployed components (manager,
driver, UI).
Longhorn #2120
Signed-off-by: Phan Le <phan.le@rancher.com>
To avoid confusing user, we move the registry secret setting
outside of default setting section. Now, user will set
registry secret setting in privateRegistry.registrySecret
Longhorn #1670
Signed-off-by: Phan Le <phan.le@rancher.com>
We changed the imagePullPolicy to IfNotPresent so that user can easily
install Longhorn in air-gap instalation.
Also add a bash script for the developer to quickly change all the
imagePullPolicies back to Always so that k8s always pull the
lastest images. This will be useful when dev use the tag such as master.
Longhorn #1491
Signed-off-by: Phan Le <phan.le@rancher.com>
When pod security policies are used, the default restricted policy does
not allow root permissions. Even when a more permissive policy is
assigned to the service account, we need to inform k8s that we need root
permissions so that the correct policy can be selected.
Signed-off-by: Aaron Spettl <aaron@spettl.de>
