When trying to add a hardening CI job by copying configuration from
hardening.md, yamllint CI job deleted invalid format.
This fixes it for maintaining the CI job.

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

When we saw 0 as the default value of containerd_oom_score, we had
a question why the value was not -999.
This adds the note to explain it.

* Fix: install policy controller on kdd too

* Remove the calico_policy_version condition altogether

* Install policy controller both on canal and calico under same condition

Coredns image must be available everywhere as it
may be rescheduled to a non-control-plane-node.

To block merging pull requests which contain typo automatically.

* Support kubeadm patches in v1beta3

* Update kubeadm patches sample files in inventory

* Fix pre-commit syntax

* Set kubeadm_patches  enabled to false in sample inventory

Signed-off-by: eminaktas <eminaktas34@gmail.com>

Signed-off-by: eminaktas <eminaktas34@gmail.com>

We are maintaining version info on the README.md, and it is not
necessary to maintain that on setting-up-your-first-cluster.md

Co-authored-by: Jonathan Süssemilch Poulain <jonathan@sofiero.net>

Co-authored-by: Rene Luria <rene.luria@infomaniak.com>

Add missing permissions to Openstack cloud controller to make sure controller runs as intended

* make it possible to configure bastion remote ips

* Update README.md

* fix: remove trailing backslash

* fixed indent in cilium config template

Signed-off-by: dcwbq <biqiang.wu@daocloud.io>

Signed-off-by: dcwbq <biqiang.wu@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

When a machine that use dhclient and resolvconf reboots, this will make /etc/resolv.conf
remain close to the one before reboot

The ostree variable is not defined previously raising an error when
the runtime tries to read it.

feat(docs/openstack.md): Put Additional step needed when using calico or kube-router in own section (#9320)

and supply a default runtime spec.

Signed-off-by: eminaktas <eminaktas34@gmail.com>

Signed-off-by: eminaktas <eminaktas34@gmail.com>