Support enabling feature gates within kubeadm

Author: treydock

manifests/config/kubeadm.pp

@@ -63,6 +63,7 @@
   Integer $conntrack_min = $kubernetes::conntrack_min,
   String $conntrack_tcp_wait_timeout = $kubernetes::conntrack_tcp_wait_timeout,
   String $conntrack_tcp_stablished_timeout = $kubernetes::conntrack_tcp_stablished_timeout,
+  Hash[String[1], Boolean] $feature_gates = $kubernetes::feature_gates,
 ) {
   if !($proxy_mode in ['', 'userspace', 'iptables', 'ipvs', 'kernelspace']) {
     fail('Invalid kube-proxy mode! Must be one of "", userspace, iptables, ipvs, kernelspace.')

manifests/init.pp

@@ -527,6 +527,12 @@
 # Only works with Kubernetes 1.22+
 # Default: no phases skipped
 #
+# [*feature_gates*]
+# Feature gate hash to be added to kubeadm configuration
+# Example:
+#   {'RootlessControlPlane' => true}
+# Default: undefined, no feature gates
+#
 # Authors
 # -------
 #
@@ -684,6 +690,7 @@
   String $tmp_directory                                          = '/var/tmp/puppetlabs-kubernetes',
   Integer $wait_for_default_sa_tries                             = 5,
   Integer $wait_for_default_sa_try_sleep                         = 6,
+  Hash[String[1], Boolean] $feature_gates                        = {},
 ) {
   if !$facts['os']['family'] in ['Debian', 'RedHat'] {
     notify { "The OS family ${facts['os']['family']} is not supported by this module": }

templates/v1beta3/config_kubeadm.yaml.erb

@@ -101,6 +101,12 @@ etcd:
 <% end -%>
         keyFile: /etc/kubernetes/pki/etcd/client.key
 imageRepository:  <%= @image_repository %>
+<% unless @feature_gates.empty? -%>
+featureGates:
+<% @feature_gates.each_pair do |key,value| -%>
+  <%= key %>: <%= value %>
+<% end -%>
+<% end -%>
 kind: ClusterConfiguration
 kubernetesVersion: v<%= @kubernetes_version %>
 networking: