Add option to deploy a local CA clusterissuer

[simu]

We add logic which is modeled after https://cert-manager.io/docs/configuration/selfsigned/#bootstrapping-ca-issuers to deploy a cluster issuer which is backed by a locally managed CA certificate.

By default, this clusterissuer is not deployed.

Checklist

• The PR has a meaningful title. It will be used to auto generate the
  changelog.
  The PR has a meaningful description that sums up the change. It will be
  linked in the changelog.
• PR contains a single logical change (to build a better changelog).
• Update the documentation.
• Categorize the PR by adding one of the labels:
  bug, enhancement, documentation, change, breaking, dependency
  as they show up in the changelog.