calico eBPF mode

Created by: garloff

Allow for calico to use eBPF rather than standard Linux iptables/netfilter infrastructure. This should help with performance and provide a more fair comparison with cilium (see issue #44 (closed)). This probably requires removing calico to be deployed at kubeadm node creation time and delay it to a later stage.