This patch enables explicit pod security standards on all infrastructure
namespaces.

This patch will resolve various issues with header sizes related to the
oauth2-proxy. That appear to result in 502s on nginx side due to large
headers.

This patch forces a spreading across multiple Nodes for ingress
controller Pods. This should ensure that Pods a single node failing,
doesn't take down all ingress Pods.

Further this patch introduces a node affinity, that prefers nodes with
better CPU feature support. In order to utilise hardware acceleration as
much as possible.

References:
https://www.intel.com/content/dam/develop/external/us/en/documents/open-ssl-performance-paper-345527.pdf

This patch did not have the expected effect, therefore it's removed
again.

This reverts commit a30a13ba.

It seems that DNS lookups fail for whatever reasons since the update to
Kubernets 1.22 and result in inaccessiblity of some services. It seems
to be related to ndots, so let's fix it like this?