* There is an issue with etcd v3.5.0 where it resurrects ancient members see: https://github.com/etcd-io/etcd/issues/13196
This issue is clearly fixed in etcd v3.5.2

* Just keep the checksums

* [containerd] add hashes for 1.6.1

* [contained] make 1.6.1 the default

* [containerd] add hashes for 1.5.10

* [containerd] add hashes for 1.4.13

* [nerdct] bump to 0.17.1

Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>

[containerd] Upgrade containerd to 1.6.0 and re-enable arm64 architecture with default options (#8555)

* [containerd] add checksums for 1.6.0

* [containerd] promote 1.6.0 as the new default

* [runc] promote 1.1.0 as the new default to allow arm deployments out of the box

* [nerdctl] bump to 0.17.0 to align with containerd 1.6.0

* [reset] allow crictl stopp and rmp commands to fail

This reverts commit 41718024.

this is not complete -- there are almost certainly more instances of
this issue

Signed-off-by: Cyril Corbon <corboncyril@gmail.com>

Signed-off-by: Mac Chaffee <me@macchaffee.com>

fix: regex

fix: wrong regex_replace usage

* change default value for Encrypting Secret Data at Rest to secretbox, remove experimental flag and add documentation

* fix MD012/no-multiple-blanks

and fix the one with side effect.

Also removes `notify` from this task as the task has `changed_when: false`
and notify is not going to fire.

Signed-off-by: Cyril Corbon <corboncyril@gmail.com>

* Add kubeadm option to etcd_deployment_type to replace the etcd_kubeadm_enabled variable

Signed-off-by: necatican <necaticanyildirim@gmail.com>

* Add etcd kubeadm deployment documentation

Signed-off-by: necatican <necaticanyildirim@gmail.com>

* Refactor warning for the deprecated 'etcd_kubeadm_enabled' variable

Signed-off-by: necatican <necaticanyildirim@gmail.com>

Signed-off-by: Cyril Corbon <corboncyril@gmail.com>

Since we are already on an etcd node while executing the commands, there 
is no need to find out an etcd IP because it is on localhost.

* Allow pausing after upgrade but before uncordon

* Expand docs for upgrade pausing vars

Signed-off-by: Mac Chaffee <me@macchaffee.com>

* [calico] upgrade 3.19.x to 3.19.4

* [calico] upgrade 3.20.x to 3.20.4

* [calico] upgrade 3.21.x to 3.21.4 and make it the default

* [calico] add 3.22.0 checksums

* [calico] account for path changes in calico 3.21.4 crd archive and above

Allow to specify a source address for metallb peerings, and target only some nodes using node selectors (#8534)

* [download] add mechanism to support mirrors

* [calico] support alternate download url

* Change Cilium identity_allocation_mode to cilium_identity_allocation_mode

* Change inventory sample

* Added ppc64le support

* Fixed linting errors

Signed-off-by: Cyril Corbon <corboncyril@gmail.com>

If kubelet is run with systemd (as it always is when using kubespray),
it starts in systemd's /system.slice/kubelet.service cgroup.

This commit prevents a creation and usage of a second unrelated cgroup.

* [nerdctl] upgrade nerdctl to 0.16.0

* [nerdctl] add configuration file