[master] Auto pick #3895: Mount BPF FS for iptables mode in EE as we use BPF maps,

[sridhartigera]

Cherry pick of /pull/3895 on master.

#3895: Mount BPF FS for iptables mode in EE as we use BPF maps,

Original PR Body below

Description

We use bpf maps and programs in iptables mode for DNS inline policy. Hence the BPF FS needs to be mounted into the calico-node for the maps to be persistent across calico-node restarts.

Fix - Run the Mount BPFFs init container as part of calico node.

For PR author

• Tests for change.
• If changing pkg/apis/, run make gen-files
• If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

• Milestone set according to targeted release.
• Appropriate labels:
  • kind/bug if this is a bugfix.
  • kind/enhancement if this is a a new feature.
  • enterprise if this PR applies to Calico Enterprise only.