* [etcd] make etcd 3.5.16 default

* Update etcd binary checksums for version 3.5.16 and lower

Testing for group membership with group names makes Kubespray more
tolerant towards the structure of the inventory.
Where 'inventory_hostname in groups["some_group"] would fail if
"some_group" is not defined, '"some_group" in group_names' would not.

- Execute boostrap-os before so that Python is installed for kubespray-defaults
- Remove outdated kubespray-defaults dependency on boostrap-os

* Update multus to v4.1.0 and clarify cilium compatibility

* Fix: bug introduced by #10934 where the template would break if multus was defined

* Set priorityClassName to system-node-critical for multus pods

The default value is used across kubespray but only defined in
kubernetes/node.
Move it to kubespray-defaults

K8s is moving away from the "master" terminology, so kubespray should follow the same naming conventions. See https://github.com/kubernetes/community/blob/65d886bb3029e73d9729e1d4f27422a7985233ed/sig-architecture/naming/recommendations/001-master-control-plane.md

* Simplify docker systemd unit

systemd handles missing unit by ignoring the dependency so we don't need
to template them.

* Remove RHEL 7/CentOS 7 support

- remove ref in kubespray roles
- move CI from centos 7 to 8
- remove docs related to centos7

* Remove container-storage-setup

Only used for RHEL 7 and CentOS 7

Signed-off-by: Jongwoo Han <jongwooo.han@gmail.com>

* make calico api server manifest backward compatible with version older than 3.27.3

Add 3.28.1 checksums
Add 3.28.0 checksums
Change default version to 3.27.3

* change default calico version to 3.28.1

* Set mount type to DirectoryOrCreate for hostPath needed by Calico

We explicitly check for equality so customizing kubeadm_version does not
work at the moment.

Use only one variable instead.

Consistent boolean values in ansible playbooks

Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>

Signed-off-by: tu1h <lihai.tu@daocloud.io>

Signed-off-by: Bas Meijer <bas.meijer@enexis.nl>

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

Signed-off-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

* Chore: bump cinder-csi-plugin from v1.29.0 to v1.30.0

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

* Docs: update README.md cinder-csi-plugin version

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

* Feat: upgrade cert-manager crd to 1.14.7

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

* Feat: upgrade cert-manager download version to 1.14.7

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

Add hashes to crictl, crio, kubelet, kubectl and kubeadm

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

Signed-off-by: tu1h <lihai.tu@daocloud.io>

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

Signed-off-by: tu1h <lihai.tu@daocloud.io>