[Tracking] Bootstrap/Automation

[alxbl]

The following still needs to be automated:

• DynamicDNS updates
• istio-inject label injection
• zfs pool detection, provisioning and/or importing
• provision secrets from /mnt/secrets
• install calico apiserver
  • patch apiservice v3.projectcalico.org .spec.caBundle with apiserver.pem
• calico/istio integration
  • calico configmap patching for istio policy
  • istio config map for dikaste
• CoreDNS - Patch Config to use DNS over TLS via Cloudflare to not depend on internal DNS (This leads to issues when router is advertising cluster as DNS resolver to the cluster...)

# coredns configmap
forward . tls://1.1.1.1 {
    tls_servername tls.cloudflare-dns.com
}

• velero schedule and BSL provisioning
• Prometheus/Grafana deployment