* Use proper openssl command to differentiate between host and ip in current certificate check

* fixup! Use proper openssl command to differentiate between host and ip in current certificate check

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

https://github.com/kubernetes/kubeadm/issues/1498 was closed

Signed-off-by: Kuralamudhan Ramakrishnan <kuralamudhan.ramakrishnan@intel.com>

* add audit webhook support

* use generic name auditsink

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

* Fix kube-proxy removal

* Fix unwanted skipped task for kube-proxy
* Fix kube_proxy_remove default

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

* Add test for kube-router svc proxy

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>

* Fix kubelet cgroup driver detection for crio

Remove fact standalone_kubelet since it is not used

* Fix yamllint complaints of roles/kubernetes/node/tasks/facts.yml

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>

This will avoid SSH connection on the local host

* Add event-ttl duration

* Fix wrong location

* ADD tls cipher suites support

yaml lint

yamllint

* update test case

* update test case

* MINOR: Check kernel version before enable modprobe nf_conntrack

* CLEANUP: no more need to ignore error of this task

* MINOR: Fixing yaml and ansible lint error - remove trailling-space

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>

If the special parameter "$@" is not quoted, the following command will not work:

./kubectl.sh patch storageclass my-storage-class -p '{"metadata": {"annotations":{"storageclass.kubernetes.io/is-default-class":"true"}}}'