* Update fedora35 vagrant box url

* Update Terraform to 1.3.7

* Update Vagrant to 2.3.4

* add terraform lock files to ignore list

* move contrib/terraform/metal to contrib/terraform/equinix to reflect upstream change

* contrib/terraform/vsphere: mark vsphere_password as sensitive

Signed-off-by: Mathieu Parent <math.parent@gmail.com>

* contrib/terraform/vsphere: remove unused modules

Signed-off-by: Mathieu Parent <math.parent@gmail.com>

Signed-off-by: Mathieu Parent <math.parent@gmail.com>

Signed-off-by: Mathieu Parent <math.parent@gmail.com>

 Terraform Openstack: replace deprecated template provider with supported cloudinit provider (#9536)

* [upcloud] Fixed issue where DNS would be blocked while using allowlist

* Missed one NTP rule

* Add missing zone input variable

* Fix terraform formatting

`test` is is a internal Python package (see [doc]), and as such should not be
used here. It make tests fail in some environments.

[doc]: https://docs.python.org/3/library/test.html

Co-authored-by: Jonathan Süssemilch Poulain <jonathan@sofiero.net>

* make it possible to configure bastion remote ips

* Update README.md

* add pre-commit hook configuration

* add tmp.md to .gitignore

* describe the use of pre-commit hook in CONTRIBUTING.md

* fix docs/integration.md errors identified by markdownlint

* fix docs/<file>.md errors identified by markdownlint

* docs/azure-csi.md
* docs/azure.md
* docs/bootstrap-os.md
* docs/calico.md
* docs/debian.md
* docs/fcos.md
* docs/vagrant.md
* docs/gcp-lb.md
* docs/kubernetes-apps/registry.md
* docs/setting-up-your-first-cluster.md
* docs/vagrant.md
* docs/vars.md

* fix contrib/<file>.md errors identified by markdownlint

* Subnet setup order fix & Number of master nodes syntax fix

* Mistake fix!

* Formatting

Today we have many contributions to contrib/offline/ and some PRs
contained invalid coding style for those scripts.
This enables shellcheck to make such invalid coding style easily.

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Please see the conversation here: https://groups.google.com/a/kubernetes.io/g/dev/c/DYZYNQ_A6_c

Due many patterns of Linux distributions, it is difficult to install
ansible dependencies as system-wide stably.
Apart of Kubespray doc[1] recommends to use venv to avoid such issue,
and this applies venv usage to the other parts of the doc.

[1]: https://github.com/kubernetes-sigs/kubespray/blob/master/docs/setting-up-your-first-cluster.md#set-up-kubespray

Signed-off-by: cyclinder <qifeng.guo@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

* [upcloud] add option to use preconfigured cpu/mem plan

* [upcloud] add option to use firewall rules for API server/SSH access

* [upcloud] add option to use managed load balancer

* [openstack] fix for new network modules

* [openstack] for-each master nodes

* [terraform] use modern day equinix metal provider

* [CI] ensure packet job tests metal

Add tag to AWS VPC subnets for automatic subnet discovery by load balancers or ingress controllers (#8705)

* [upcloud] add upcloud csi-driver

* Option to use ansible_host as api ip for kubueconfig

* - add ability to specify the network_zone in hetzner terraform
- Export the network id from hetzner terraform the the generated inventory.ini

* - Add with_networks variable to allow different deployments of hcloud controller manager

- Add network id to hcloud controller secret (added via the inventory)

- Don't include extra_args if it's not set

terrform/openstack: Fix templating of ansible_ssh_common_args in no_floating.yml if used as TF module (#8646)

* terraform/openstack: Use path.module for ansible_bastion_template.txt

This extends on #7643 by not using path.root, but switching to path.module
to allow use of the terraform code as a module itself. This change then keeps
all calls to the template file stable even for that use-case.

* terraform/openstack: Make sed calls fail on errors

By using a single call with two replacements to use of sed will create proper exit codes
and allowing for errors to be recognized by terraform.

This adds a unit test for the function.

Also, do not create unneeded resources (target pools are charged and should
only be created when needed).