* [CI] fix molecule tests on opensuse by upgrading to 15.4

* [opensuse] use correct python crytography package name depending on distribution version

when ingress-nginx is deployes without a class, we need to use 'ingress-controller-leader' resource instead of the default 'ingress-controller-leader-nginx' (#9156)

To check the kube-vip version between readme.md and the default value
on the role, this updates check_readme_versions.sh

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

https://github.com/cloudnativelabs/kube-router/releases/tag/v1.5.1

Today we have many contributions to contrib/offline/ and some PRs
contained invalid coding style for those scripts.
This enables shellcheck to make such invalid coding style easily.

Signed-off-by: ydFu <ader.ydfu@gmail.com>

Signed-off-by: bo.jiang <bo.jiang@daocloud.io>

Signed-off-by: cyclinder <qifeng.guo@daocloud.io>

* docs(hardening): add SeccompDefault admission plugin to kubelet feature gates

* fix(kubelet-config): enable config through kubelet_feature_gates

* feat(kubelet): add kubelet_seccomp_default variable