feat(calico): Add initial firewall preparations

infrastructure/firewall/controller-config.yaml

+apiVersion: crd.projectcalico.org/v1
+kind: KubeControllersConfiguration
+metadata:
+  annotations:
+    kustomize.toolkit.fluxcd.io/prune: disabled
+  name: default
+spec:
+  controllers:
+    node:
+      hostEndpoint:
+        autoCreate: "Enabled"

infrastructure/firewall/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: default
+resources:
+  - controller-config.yaml

infrastructure/kustomization.yaml

@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - kyverno
+  - firewall
   - cert-manager
   - prometheus
   - ingress-nginx