Epic: [Self-Hosted] reference architecture GA release

[adrienthebo]

Summary

This epic tracks outstanding work for the general availability release of the GKE and EKS reference architectures.

Preceding epic: #12709

Acceptance criteria

This is a placeholder issue, acceptance criteria TBD

Tasks

General

• Research and implement versioning for reference architectures #13287
• [Ref Archs] Support CPU limiting (i.e. ws-daemon CPU limits) #13833
• [Ref Archs] Full review of ref archs for security and compliance #13834
• [Ref Archs] Support IO Limiting #13832
• self-hosted/docs: reference architectures don't distinguish between requirements and general setup instructions #12400
• https://github.com/gitpod-io/website/issues/2694
• Add minimum cert-manager version to reference architectures #11539
• self-hosted/docs: break up managed DNS zone creation, external-dns chart installation #12407
• [reference architecture] Investigate using tigera-operator instead of static calico manifests #12492
• [Self-Hosted] Guidance on workspace resource limits for Reference Architectures. #11449
• self-hosted/docs: reference architecture troubleshooting documentation #12566
• [self-hosted/docs] update reference architecture Kubernetes versions to track updates #12715
• [self-hosted] Attach metadata to Gitpod cluster indicating the reference architecture version #13327
• [self-hosted/docs] GKE (and potentially EKS) scale to zero with node labels might not scale up #12782 (Should)
• Epic: Workspace Classes on Self-Hosted #10805 (should)

GKE

• self-hosted/docs: GKE reference architecture references unusable GKE workload identity annotation #12406

EKS

• self-hosted/docs: Expand ref architecture documentation on eksctl wellknownpolicies #12397
• self-hosted/docs: EKS ref architecture may not indicate how to fetch EKS credentials #12631
• [single-cluster/eks] Support for self-signed certificates #12979

AKS:

• [self-hosted] Consider separating k8s system pods from Gitpod IDE/meta/workspace-service pods #13139