The dev-test ClusterClass does not expose the API loadbalancer allowed CIDR, nor the bastion. This makes it very hard to use.
We should add a variable for allowed CIDR and (a complex variable) for the bastion.