* Add manifests to inject and trust CA certificates
* Add base constraint so gnocchi metricd is tied to core-clone