Supports Kubespray workspace with multiple OpenStack-deployed k8s
clusters.

* Create sample inventory directory for template
* Moved broken `group_vars` symlink to sample directory
* Created sample cluster Terraform file
* Updated documentation

Set TasksMax to infinity on any OS with systemd

* Fixed generate front proxy client certs with vault

* fix vault cert management

* Distrebute etcd node certs to vault hosts

Adding health checking to kube proxy. Fixes #2308

* Set filemode to 0640

weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root.

* Set mode 0640 on users_file with basic auth

Update Terraform docs and authentication method

Added iptables lock fix and ajusted oom-score

* Added cilium support

* Fix typo in debian test config

* Remove empty lines

* Changed cilium version from <latest> to <v1.0.0-rc3>

* Add missing changes for cilium

* Add cilium to CI pipeline

* Fix wrong file name

* Check kernel version for cilium

* fixed ci error

* fixed cilium-ds.j2 template

* added waiting for cilium pods to run

* Fixed missing EOF

* Fixed trailing spaces

* Fixed trailing spaces

* Fixed trailing spaces

* Fixed too many blank lines

* Updated tolerations,annotations in cilium DS template

* Set cilium_version to iptables-1.9 to see if bug is fixed in CI

* Update cilium image tag to v1.0.0-rc4

* Update Cilium test case CI vars filenames

* Add optional prometheus flag, adjust initial readiness delay

* Update README.md with cilium info

Fix typo in aws.md docs

rollback to a two stage CI

Remove redundant python-apt install

"kubernetes" is spelled wrong in the cluster tag example

Additional CI platform (digital-ocean)

Fix bug issues #2289

This updated scenario ensures deployment still passes without
having any group_vars available.

Update default CONFIG_FILE for contrib/inventory_builder/inventory.py

Increased timeout values for k8s API server restart

xtables lock was missing. Added new option for oom-score to make sure it's not killed in an OOM situation before regular pods.

Fix version comparison

Fix default_resolver is undefined

fix issues #2265