[stable/opa] Fix default OPA values.yaml and update to latest (#19480)

* [stable/opa] Fix default opa config.yaml

Historically opa by default is configured to download a bundle file
with default values.yaml options to allow for it to work with only
`helm install`. At some point this changed to not include the default
configuration which effectively breaks the defaults (and invalidates
the README that explains how to customize the policies further).

This change restores the config and updates it to the latest style of
bundle configuration using the `bundles` keyword.

Signed-off-by: Patrick East <east.patrick@gmail.com>

* [stable/opa] Update OPA and kube-mgmt versions

Bumping the versions of OPA and kube-mgmt to the latest and greatest.

The newer versions include bug fixes, performance enhancements, and
features that users should have.

Signed-off-by: Patrick East <east.patrick@gmail.com>

stable/opa/Chart.yaml

@@ -1,12 +1,12 @@
 apiVersion: v1
-appVersion: 0.14.1
+appVersion: 0.15.1
 description: Open source, general-purpose policy engine. Enforce fine-grained invariants over arbitrary Kubernetes resources.
 name: opa
 keywords:
 - opa
 - admission control
 - policy
-version: 1.12.0
+version: 1.13.0
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:

stable/opa/values.yaml

@@ -5,15 +5,15 @@
 # https://www.openpolicyagent.org/docs/configuration.html for more details.
 # Default value is no default config. For custom config, the opa key
 # needs to include the opa config yaml, eg:
-# opa:
-#   services:
-#     controller:
-#       url: https://some.bundle.host
-#   bundle:
-#     service: controller
-#     name: some-bundle-name.tgz
-#   default_decision: "/some_bundle_name/main"
-opa: false
+opa:
+  services:
+    controller:
+      url: 'https://www.openpolicyagent.org'
+  bundles:
+    quickstart:
+      service: controller
+      resource: /bundles/helm-kubernetes-quickstart
+  default_decision: /helm_kubernetes_quickstart/main
 
 # Setup the webhook using cert-manager
 certManager:
@@ -103,7 +103,7 @@ authz:
 
 # Docker image and tag to deploy.
 image: openpolicyagent/opa
-imageTag: 0.14.1
+imageTag: 0.15.1
 imagePullPolicy: IfNotPresent
 
 # Port to which the opa pod will bind itself
@@ -114,7 +114,7 @@ port: 443
 mgmt:
   enabled: true
   image: openpolicyagent/kube-mgmt
-  imageTag: 0.9
+  imageTag: "0.10"
   imagePullPolicy: IfNotPresent
   extraArgs: []
   resources: {}