Ideally, we can automatically create a hostname that is publicly routable for federation. First idea was OCP Route, but that likely won't work as it uses SNI to determine which OCP Route to use (and we need custom SNI values for our internal routing already) - so we'd need a NodePort of our own.

Also, when setting a hostname as NetworkGateway endpoint, Istio is currently resolving DNS at startup, this has to be more dynamic, e.g. by looking at DNS TTLs and resolving periodically.

The goal of this task is to look for ways to automate the creation of such DNS names within OCP, making sure they fit our requirements (ie no matching based on SNI), and any necessary implementation in istiod.