Upgrade local-path-storage to v0.0.14

Explain where K3s docs source code is

Update stable channel to v1.18.3+k3s1

* This version of k3s addresses two CVEs -- Please reference the release notes

Remove trailing whitespaces

update CNI to v0.8.6-k3s1

To please my OCD, and remove my editor flashing boxes,
I am removing trailing whitespaces. They have no purpose in life.

Update k8s 1.18.3

Feature Request #1741: Update to set default CipherSuites

coredns: readiness- and livenessProbe tweaks (~15s -> ~3s startup)

Bump stable version from v1.17.4 to v1.18.2

* Updates channel.yaml - replaces v1.17.4 with v1.18.2 which is now stable.

The default CipherSuites need to be set to disable the insecure TLS 1.2 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 Cipher

contrib/ansible: Remove duplication and redirect to new repository

Signed-off-by: Julien DOCHE <julien.doche@gmail.com>

add code of conduct

Feature Request #1741: Adding support for tls minimum version

This will watch for the following kube-apiserver-arg variables and apply
them to the k3s kube-apiserver https listener.

  --kube-apiserver-arg=tls-cipher-suites=XXXXXXX
  --kube-apiserver-arg=tls-min-version=XXXXXXX

Start kube-apiserver in the background

Add supervisor port

In rke2 everything is a static pod so this causes a chicken and egg situation
in which we need the kubelet running before the kube-apiserver can be
launched.  By starting the apiserver in the background this allows us to
do this odd bootstrapping.

Add channels for 1.18

[systemd] Add value to LimitNOFILE due to performance problems

The readinessProbe was delaying the startup of coredns greatly. This
change brings startup times from ~15s to ~2-3s when testing locally. A
reduction of ~80%.

The livenessProbe would also take potentially more than a minute to
be declared unhealthy and restarted which is now tweaked down to about
30 seconds

For more information about the probes, see: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#configure-probes

Support prepulling images on start

Only echo Waiting for kubelet every 30 seconds

Encapsulate execution logic

In k3s today the kubernetes API and the /v1-k3s API are combined into
one http server.  In rke2 we are running unmodified, non-embedded Kubernetes
and as such it is preferred to run k8s and the /v1-k3s API on different
ports.  The /v1-k3s API port is called the SupervisorPort in the code.

To support this separation of ports a new shim was added on the client in
then pkg/agent/proxy package that will launch two load balancers instead
of just one load balancer.  One load balancer for 6443 and the other
for 9345 (which is the supervisor port).

This moves all the calls to cobra root commands to one package
so that we can change the behavior of running components as embedded
or external.