Internal Air-gap with Istio, MetalLB and CoreDNS

[justinthelaw]

Is your feature request related to a problem? Please describe

Although we have the IP Tables scripts for air-gapping the entire machine that is being used to test air-gap installation of UDS RKE2 and its components, we still want to be able to restrict the entire cluster's resources from contacting services outside of the cluster and/or on the internet (e.g., error reports, Docker, analytics endpoints, etc.).

Describe the solution you'd like

Internal cluster policies, using Istio ad CoreDNS, can enable a strong pseudo-airgap that will enable air-gap testing within a pre-bootstrapped RKE2 cluster.

Describe alternatives you've considered

N/A

Additional context

N/A