* add ingress nginx webhook

* fix ingress nginx template

* [pod-infra] bump pod infra container version to 3.6

* [cri-dockerd] align pod infra container image with other CRIs

Signed-off-by: cyclinder <qifeng.guo@daocloud.io>

kubectl_checksums for amd64 v1.23.8 was missing the last digit

* feat: make kubernetes owner parametrized

* docs: update hardening guide with configuration for CIS 1.1.19

* fix: set etcd data directory permissions to be compliant to CIS 1.1.12

[docker] use cri-dockerd instead of dockershim for any kubernetes version deployed with docker as the container_manager

* use new artifact release name
* enable cri-dockerd dual setack support if enable_dual_stack_networks

Please see the conversation here: https://groups.google.com/a/kubernetes.io/g/dev/c/DYZYNQ_A6_c

https://github.com/cloudnativelabs/kube-router/releases/tag/v1.5.0

* Metrics Server now requires access to nodes/metrics RBAC resource instead of nodes/stats. See: https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.6.0
* Minimize rbac permissions.

Map appropriate versions of etcd and snapshot_controller containers with
k8s 1.24

* [calico]
* add 3.22.3 and 3.23.1
* set 3.22.3 default
* fix download crd for calico 3.22.3 and upper

* update calico README.md

* [kubernetes] add hashes for 1.24.1 and other versions.
versions: v1.21.13, v1.22.10, v1.23.7 & v1.24.1

* [kubernetes] make v1.23.7 default1

Current Kubespray supports the Kubernetes version 1.21 or upper with
`kube_version_min_required: v1.21.0`

Then kube_version v1.20- related code is not used at all.
This deletes those code for cleanup.

Signed-off-by: necatican <necaticanyildirim@gmail.com>