Update Istio controlplane cni k8s spec

This section of the istio controlplane chart, limits the CNI k8s spec to only allow podAnnotations, nodeSelector, tolerations, and affinity, so not all of the options in the KubernetesResourcesSpec for configuring the istio CNI are available. This ticket is to update CNI k8s spec to allow all KubernetesResourceSpec options.