Christian Schlotter

*Adding cloud-provider-vsphere to the list, because they use the same environment / capabilities (share the same environment)

@rikatz maybe worth talking directly to @adam-jian-zhang to figure out when and who will continue on this one or if it makes sense to take this over :-)

> Question: should we add a featureflag for it? Good question: I tend to say no, because you have to explicitly use the `library://` prefix to make use of it....

Hi @rikatz , I think this looks good to continue. The only question coming up for me after reading all again is this part here: https://github.com/kubernetes-sigs/cluster-api-provider-vsphere/pull/1839/files#r1335335234 About "do we have...

Also depends on which versions we need to support + how far it needs to be backwards compatible :-) (So there won't be cherry-picks for this).

cc @neolit123 @fabriziopandini @sbueringer :-) PTAL

FYI: I'm on PTO the next days and will be back on 15th. Will start addressing feedback then :-)

> Pointing the control-plane's kubelet to the local kube-apiserver may cause some stability issues. When kube-apiserver fails, the local kubelet will crash, and the node will become NotReady, the entire...

> Little more explanation to clusterctl upgrade failure. Now we are seeing only one flake when upgrading from `0.4->1.4` or `0.4->1.5`, as mentioned before. Its failing with following error: >...

Some observation via #10193 : ``` I0223 19:20:31.564028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capd-system/capd-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capd-serving-cert\": the object has...