* Feat: upgrade cert-manager crd to 1.14.7

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

* Feat: upgrade cert-manager download version to 1.14.7

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

Add hashes to crictl, crio, kubelet, kubectl and kubeadm

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

* add the ability to configure extra args to the different cinder-csi-plugin containers

* endfor block added to be syntactically correct jinja

Signed-off-by: serge Hartmann <serge.hartmann@gmail.com>

Support disable unattended-upgrades for Linux kernel and all packages start with linux- on Ubuntu (#11296)

Signed-off-by: tu1h <lihai.tu@daocloud.io>

Signed-off-by: tu1h <lihai.tu@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: tu1h <lihai.tu@daocloud.io>

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

* make sure peers is defined.

* Update peer_with_router.yml

Fix regression added in 663fcd10 for
flatcar nodes.

See: https://github.com/kubernetes-sigs/kubespray/commit/663fcd104c38ddc2bf8c023f6f6b3705048d531e

While uncommon, provisioning only a control plane is a valid use case,
so don't block it.

- markdownlint (manual fix)
- end-of-file-fixer
- requirements-txt-fixer
- trailing-whitespace

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: tu1h <lihai.tu@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: tico88612 <17496418+tico88612@users.noreply.github.com>

fix: Change the position of the containerd_extra_args parameter to make the parameter more universal. (#11013)

that you can only place thing in the root table in a toml document before the first table heading.

This reverts commit bc5b38a7.

Revert OCCM standard dnsPolicy to ClusterFirst and make dnsPolicy configurable to support 10618 (#11168)

Signed-off-by: Ugur Ozturk <ugurozturk918@gmail.com>

With CentOS, kubespray currently produces the following warning:

[WARNING]: TASK: bootstrap-os : Enable Oracle Linux repo: The loop variable
'item' is already in use. You should set the `loop_var` value in the
`loop_control` option for the task to something else to avoid variable
collisions and unexpected behavior.

This could bites us in nasty ways, so fix it.