a843fda allow injecting the image for the container orchestrator (#10169) 464954d add secret mounting for orchestrator (#10168)