fix: configure Kubernetes feature gates with dictionaries (#13608)

* fix: configure Kubernetes feature gates with dictionaries

* docs: update feature gate settings to dictionaries

docs/ansible/vars.md

@@ -132,8 +132,8 @@ following default cluster parameters:
 
 * *cloud_provider* - The provider for cloud services. (default is unset, Set to `external` for running with an external cloud provider)
 
-* *kube_feature_gates* - A list of key=value pairs that describe feature gates for
-  alpha/experimental Kubernetes features. (defaults is `[]`).
+* *kube_feature_gates* - A dictionary of feature gate names and boolean values for
+  alpha/experimental Kubernetes features (defaults to `{}`).
   Additionally, you can use also the following variables to individually customize your kubernetes components installation (they works exactly like `kube_feature_gates`):
   * *kube_apiserver_feature_gates*
   * *kube_controller_feature_gates*
@@ -141,8 +141,8 @@ following default cluster parameters:
   * *kube_proxy_feature_gates*
   * *kubelet_feature_gates*
 
-* *kubeadm_feature_gates* - A list of key=value pairs that describe feature gates for
-  alpha/experimental Kubeadm features. (defaults is `[]`)
+* *kubeadm_feature_gates* - A dictionary of feature gate names and boolean values for
+  alpha/experimental Kubeadm features (defaults to `{}`).
 
 * *authorization_modes* - A list of [authorization mode](
   https://kubernetes.io/docs/reference/access-authn-authz/authorization/#using-flags-for-your-authorization-module)

docs/developers/ci-setup.md

@@ -152,7 +152,7 @@ metrics_server_enabled: True
 # Enable ZSWAP
 kubelet_fail_swap_on: False
 kube_feature_gates:
-  - "NodeSwap=True"
+  NodeSwap: true
 ```
 
 ## Additional files

docs/operations/hardening.md

@@ -76,7 +76,8 @@ remove_anonymous_access: true
 ## kube-controller-manager
 kube_controller_manager_bind_address: 127.0.0.1
 kube_controller_terminated_pod_gc_threshold: 50
-kube_controller_feature_gates: ["RotateKubeletServerCertificate=true"]
+kube_controller_feature_gates:
+  RotateKubeletServerCertificate: true
 
 ## kube-scheduler
 kube_scheduler_bind_address: 127.0.0.1
@@ -98,7 +99,8 @@ kubelet_event_record_qps: 1
 kubelet_rotate_certificates: true
 kubelet_streaming_connection_idle_timeout: "5m"
 kubelet_make_iptables_util_chains: true
-kubelet_feature_gates: ["RotateKubeletServerCertificate=true"]
+kubelet_feature_gates:
+  RotateKubeletServerCertificate: true
 kubelet_seccomp_default: true
 kubelet_systemd_hardening: true
 # In case you have multiple interfaces in your