Openshift system namespaces annotation restriction
Openshift system namespaces annotation restriction

Don't allow the following namespaces to be annotated with "opflex.cisco.com/endpoint-group" with name "kubernetes|kube-system" for any new OpenShift clusters: kube-service-catalog,kube-service-catalog, openshift-console, openshift-monitoring and openshift-web-console
This change is made to handle the new acc-provision resources naming convention starting Jordan. Also blocks our openshift-ansible installation scripts <= 3.11 from setting the eg group to "kubenetes|kube-system" (https://github.com/noironetworks/openshift-ansible/commit/0ad747948460a3fdd7b57d49c0a43a20eda9686d)

noironetworks/aci-containers,noironetworks/aci-containers