running the concourse helm chart on microk8s

run-concourse-microk8s.txt

1. get `apiserver` to allow privileged

the flag `--allow-privileged` in `kube-apiserver` 
(https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/) 
is not set to `true` by default.

concourse workers need to run as privileged though.

to configure that flag, modify `/var/snap/microk8s/current/args/kube-apiserver` adding
that flag.

that done, restart the `kube-apiserver` systemd service

  sudo systemctl daemon-reload
  sudo systemctl restart snap.microk8s.daemon-apiserver.service


2. get `dns`, `helm`, and `storage` set up

concourse workers use StatefulSets under the hood - `storage` is thus required.
`dns` is required for ClusterFirst DNS policy that's set by default in postgres
`helm` is required because ... `helm`