charts/redpanda: v5.10.2

Changed

• serviceAccount.create now defaults to true.

  The previous behavior resulted in using the default service account and
  extending it with all bindings generated from the chart. Such behavior is
  unlikely to be desired.

• rpk debug bundle --namespace $NAMESPACE now works by default.

  The chart now creates a set of Roles and RoleBindings that satisfy the
  requirements of running rpk debug bundle from any redpanda Pod. These
  permissions may be disabled by specifying rbac.rpkDebugBundle=false.

  Additionally, the redpanda container now always has a Kubernetes
  ServiceAccount token mounted to it to ensure rpk debug bundle can be
  executed successfully.

Removed

• Removed regex validation of all image tags.

Fixed

• Fixed rack awareness by mounting a service account token to the initcontainer when rack awareness is enabled.
• Broken Issuers and Certificates are no longer needlessly generated when tls.<cert>.issuerRef is provided.
• The schema_registry_client and pandaproxy_client stanzas of redpanda.yaml
  now respect listeners.kafka.tls.trustStore, when provided.
  See also helm-chart 1573 issue.