Upgrade kine to v0.3.3

Update dqlite to 1.3.1-r1

Run kubelet with containerd flag

Warn if NPC can't start rather than fatal error

Update manifest publish

Should resolve rancher/k3s#1283

Test cleanup

The containerd flag was accidentally added to kubelet and is
deprecated, but needed for cadvisor to properly connect with
the k3s containerd socket, so adding for now.

If the ip_set kernel module is not available we should warn
that the network policy controller can not start rather than
cause a fatal error.

Also adds module probing and config checks for ip_set.

Flannel hostgw support

Update air-gap for traefik 1.7.19

Upload build to google cloud bucket

Update klipper-helm images to v0.2.2

follow with https://github.com/rancher/k3s/commit/8f8cfd102ce99b0ebebe23c1719e4cdc190eda18#diff-579f509a7a35baa26b8b932d79aa954fR42Signed-off-by: William Zhang <zhang.wanmin@zte.com.cn>

upgrade helm image

Fix uint64 truncation issue in dqlite

Add lease permissions to ccm cluster role

Respect IPv6 when building proxy address

Set wireguard persistent-keepalive on wg set peer

Revert "Merge pull request #1190 from erikwilson/wireguard-keepalive"

This reverts commit e712cdf7, reversing
changes made to d5929bc8.

Wireguard docs fail to describe that persistent-keepalive is only valid
when peer is set.

Update helm controller and vendor udpate