* copying ssh key no longer required, works with password auth
* use copy module instead of synchronize (which requires sshpass)
* less tasks and always changed tasks

If crictl (and docker) binaries are deployed to the directories
that are not in standard PATH (e.g. /usr/local/bin), it is required
to specify full path to the binaries.

* create a wrapper script with pki options
* supports all kubespray managed container engines

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>

Command line flags aren't added to kube-proxy which results in missing
feature gates set in this component. Add appropriate setting to
ConfigMap instead.

Signed-off-by: Maciej Wereski <m.wereski@partner.samsung.com>

* Added option to force apiserver and respective client certificate to be regenerated without necessarily needing to bump the K8S cluster version

* Removed extra blank line

Remove configuration variable kubeadm_control_plane

* kube-proxy never gets deployed so need to remove it

* Rotate kubelet server certificate.

* CI test kubelet server cert rotation

* Approve kubelet serving certificates in tests.

* Use proper openssl command to differentiate between host and ip in current certificate check

* fixup! Use proper openssl command to differentiate between host and ip in current certificate check

https://github.com/kubernetes/kubeadm/issues/1498 was closed

* add audit webhook support

* use generic name auditsink

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>

* Add event-ttl duration

* Fix wrong location

* ADD tls cipher suites support

yaml lint

yamllint

* update test case

* update test case

Co-authored-by: Hans Feldt <hafe@users.noreply.github.com>