Kubespray - v2.23.1

Network

• [Cilium] Fix invalid hubble yaml if cilium_hubble_tls_generate is enabled (#10476, @toonalbers)

Feature

• Add hashes for kubernetes 1.27.6 & 1.26.9 (#10443, @bozzo)
• Make kubernetes v1.27.7 default (#10543, @mzaian)
• [etcd] Default version to 3.5.9 for k8s 1.25 , 1.26 , 1.27 (#10483, @mzaian)
• Add crictl 1.26.1 for Kubernetes v1.26 (#10562, @mzaian)
• Change default cri-o versions for Kubernetes 1.25, 1.26 (#10563, @mzaian)
• [ingress-nginx] Fix nginx controller leader election RBAC permissions (#10569, @mzaian)
• Refactor NRI activation for containerd and CRI-O (remove crio_enable_nri and containerd_nri_disable) now only one var nri_enabled default to false (#10496, @fmuyassarov)

Bug or Regression

• Fix get currently configured nameservers error where there are inline comments in /etc/resolv.conf (#10415, @yankay)
• Migrate node-role.kubernetes.io/master to node-role.kubernetes.io/control-plane (#10532, @unai-ttxu)
• [download] Don't fail on 304 Not Modified (#10559, @RomainMou)