The root metadata.yaml was missing the 2.1 and 2.2 release series which
was causing an issue with the recent 2.2.0 release.

Signed-off-by: Richard Case <richard.case@suse.com>

…ot/cherry-pick-4386-to-release-2.2

[release-2.2] chore: update metedata.yaml with the release series

(cherry picked from commit 4ff5e37)

Customize golang version

Signed-off-by: Tobias Giese <tobias.giese@mercedes-benz.com>

…ot/cherry-pick-4357-to-release-2.2

[release-2.2] Add elasticloadbalancing:SetSubnets to cloudformation

This implements a GHA workflow that will automatically approve actions
to run when there is an `ok-to-test`.

This has been copied from upstream CAPI.

Signed-off-by: Richard Case <richard.case@outlook.com>

…ot/cherry-pick-4467-to-release-2.2

[release-2.2] chore: approve actions on ok-to-test

This change moves us back to using the k/k releas-notes tool to generate
our changelog for a release.

Signed-off-by: Richard Case <richard.case@outlook.com>

…ot/cherry-pick-4472-to-release-2.2

[release-2.2] feat: use k/k tooling for release notes

…ot/cherry-pick-4406-to-release-2.2

[release-2.2] Allow securing api LB, only allowing traffic from required sources

…ot/cherry-pick-4495-to-release-2.2

[release-2.2] Fix error loop for ignition

This ensures that failure domains are correctly set when using an externally managed (BYO) NLB

…ot/cherry-pick-4449-to-release-2.2

[release-2.2] Set availability zones in status.networkStatus.apiServerElb when using BYO NLB

Signed-off-by: David van der Spek <vanderspek.david@gmail.com>

…ot/cherry-pick-4463-to-release-2.2

[release-2.2] fix: don't generate nodegroup role name starting with hyphen

…ot/cherry-pick-4508-to-release-2.2

[release-2.2] Save Nat Gateways IPs to status on every reconciliation

Fix setting additional ingress rules for CP

Update documentation with CP ingress rules

…08-to-release-2.2

[release-2.2] Add additional ingress rules for CP to API

Signed-off-by: Furkat Gofurov <furkat.gofurov@suse.com>

Signed-off-by: Furkat Gofurov <furkat.gofurov@suse.com>

The tests where failing after upgrading controller-runtime due to changes in
the fake client.

Signed-off-by: Richard Case <richard.case@outlook.com>

Signed-off-by: Furkat Gofurov <furkat.gofurov@suse.com>

Signed-off-by: Furkat Gofurov <furkat.gofurov@suse.com>

[release-2.2] Bump CAPI to v1.5.2

…m rebase