1. add psp.yaml for certgen, contour and envoy
2. add the certificate.yaml for contour
3. add the annotation "external-dns.alpha.kubernetes.io/hostname" for envoy service
4. add the common label: vmwareVersion: "buildnumber"