cluster/kube: emergency fixes after evition

Some pods got evicted. Some of them broke.

  - postgres in matrix and nginx in internet because of the new policies
    (chown issues)
  - cas proxy in matrix because apparently the image was not reuploaded
    to the regsitry after ceph-waw1 died, and another node didn't have it
  - registry because it had a weak image pin an downgraded to some
    broken version on another node

Change-Id: I836036872629843c8ede1b7f67982112c90d71f0
diff --git a/cluster/kube/lib/registry.libsonnet b/cluster/kube/lib/registry.libsonnet
index a791acf..5272b2d 100644
--- a/cluster/kube/lib/registry.libsonnet
+++ b/cluster/kube/lib/registry.libsonnet
@@ -64,6 +64,7 @@
                 "config.yml": std.manifestYamlDoc({
                     version: "0.1",
                     log: {
+                        level: "debug",
                         fields: {
                             service: "registry",
                         },
@@ -248,7 +249,7 @@
                         },
                         containers_: {
                             registry: kube.Container("docker-registry") {
-                                image: "registry:2",
+                                image: "registry:2.7.1",
                                 args: ["/config/config.yml"],
                                 volumeMounts_: {
                                     config: { mountPath: "/config" },