now that it finally works, we also do the external kubeconfig, but produce a second file and upload that to the KV

now we will disable SELinux manually, do a rollout restart and then wait for the deamonset, not the pods