From bafb49b7379fd51f05f5fa9cd3af3f9a25cc4a75 Mon Sep 17 00:00:00 2001
From: Tam Mach <tam.mach@cilium.io>
Date: Thu, 22 Aug 2024 20:17:42 +1000
Subject: [PATCH] cleanup: Remove vagrant related file

The Vagrant VM is no longer maintained in favour of kind cluster (local
dev) and little vm helpers (CI), hence it's better to remove all vagrant
related files.

Signed-off-by: Tam Mach <tam.mach@cilium.io>
---
 CODEOWNERS                                    |   4 -
 .../contributing/development/dev_setup.rst    | 372 ----------
 .../contributing/testing/e2e_legacy.rst       |   8 -
 Vagrantfile                                   | 369 ----------
 contrib/scripts/add_vagrant_box.sh            | 184 -----
 contrib/vagrant/.gitignore                    |   3 -
 contrib/vagrant/build.sh                      |  16 -
 contrib/vagrant/deployments/.gitignore        |   3 -
 .../vagrant/deployments/coredns-cm.yaml.sed   |  33 -
 .../deployments/coredns-controller.yaml       | 107 ---
 contrib/vagrant/deployments/coredns-sa.yaml   |  56 --
 .../vagrant/deployments/coredns-svc.yaml.sed  |  37 -
 contrib/vagrant/nftables.rules                |   1 -
 contrib/vagrant/restart-vars                  |  12 -
 contrib/vagrant/scripts/.gitignore            |   1 -
 contrib/vagrant/scripts/00-create-certs.sh    |  84 ---
 contrib/vagrant/scripts/01-install-etcd.sh    |  83 ---
 .../scripts/02-install-kubernetes-master.sh   | 200 ------
 .../scripts/03-install-kubernetes-worker.sh   | 375 ----------
 contrib/vagrant/scripts/04-install-kubectl.sh |  85 ---
 contrib/vagrant/scripts/05-install-cilium.sh  |  17 -
 contrib/vagrant/scripts/06-install-coredns.sh |  38 -
 contrib/vagrant/scripts/08-guestbook.sh       |  31 -
 contrib/vagrant/scripts/cert-gen-helpers.bash | 293 --------
 contrib/vagrant/scripts/helpers.bash          | 124 ----
 contrib/vagrant/start.sh                      | 664 ------------------
 test/Makefile                                 |   1 -
 test/Vagrantfile                              | 276 --------
 test/get-gh-comment-info.py                   |  17 -
 test/get-vagrant-kubeconfig.sh                |   7 -
 test/packet/.gitignore                        |   4 -
 test/packet/README.md                         |  31 -
 test/packet/main.tf                           |  69 --
 test/packet/scripts/install.sh                |  72 --
 test/post_build_agent.sh                      |  17 -
 test/vagrant-ci-start.sh                      |  52 --
 test/vagrant-local-create-box.sh              |  22 -
 test/vagrant-local-start-runtime.sh           |  25 -
 test/vagrant-local-start.sh                   |  41 --
 test/vagrant_cleanup.sh                       |  13 -
 tools/dev-doctor/rootcmd.go                   |  20 -
 vagrant_box_defaults.rb                       |  12 -
 42 files changed, 3879 deletions(-)
 delete mode 100644 Vagrantfile
 delete mode 100755 contrib/scripts/add_vagrant_box.sh
 delete mode 100644 contrib/vagrant/.gitignore
 delete mode 100755 contrib/vagrant/build.sh
 delete mode 100644 contrib/vagrant/deployments/.gitignore
 delete mode 100644 contrib/vagrant/deployments/coredns-cm.yaml.sed
 delete mode 100644 contrib/vagrant/deployments/coredns-controller.yaml
 delete mode 100644 contrib/vagrant/deployments/coredns-sa.yaml
 delete mode 100644 contrib/vagrant/deployments/coredns-svc.yaml.sed
 delete mode 100644 contrib/vagrant/nftables.rules
 delete mode 100644 contrib/vagrant/restart-vars
 delete mode 100644 contrib/vagrant/scripts/.gitignore
 delete mode 100755 contrib/vagrant/scripts/00-create-certs.sh
 delete mode 100755 contrib/vagrant/scripts/01-install-etcd.sh
 delete mode 100755 contrib/vagrant/scripts/02-install-kubernetes-master.sh
 delete mode 100755 contrib/vagrant/scripts/03-install-kubernetes-worker.sh
 delete mode 100755 contrib/vagrant/scripts/04-install-kubectl.sh
 delete mode 100755 contrib/vagrant/scripts/05-install-cilium.sh
 delete mode 100755 contrib/vagrant/scripts/06-install-coredns.sh
 delete mode 100755 contrib/vagrant/scripts/08-guestbook.sh
 delete mode 100644 contrib/vagrant/scripts/cert-gen-helpers.bash
 delete mode 100644 contrib/vagrant/scripts/helpers.bash
 delete mode 100755 contrib/vagrant/start.sh
 delete mode 100644 test/Vagrantfile
 delete mode 100644 test/get-gh-comment-info.py
 delete mode 100755 test/get-vagrant-kubeconfig.sh
 delete mode 100644 test/packet/.gitignore
 delete mode 100644 test/packet/README.md
 delete mode 100644 test/packet/main.tf
 delete mode 100644 test/packet/scripts/install.sh
 delete mode 100755 test/post_build_agent.sh
 delete mode 100755 test/vagrant-ci-start.sh
 delete mode 100755 test/vagrant-local-create-box.sh
 delete mode 100755 test/vagrant-local-start-runtime.sh
 delete mode 100755 test/vagrant-local-start.sh
 delete mode 100755 test/vagrant_cleanup.sh
 delete mode 100644 vagrant_box_defaults.rb

diff --git a/CODEOWNERS b/CODEOWNERS
index 15dfacbfe3d6f..ea55a141315c4 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -332,7 +332,6 @@ Makefile* @cilium/build
 /clustermesh-apiserver @cilium/sig-clustermesh
 /contrib/ @cilium/contributing
 /contrib/containerlab/ @cilium/sig-bgp
-/contrib/vagrant/ @cilium/contributing
 /contrib/coccinelle/ @cilium/sig-datapath
 /daemon/ @cilium/sig-agent
 /daemon/cmd/datapath.go @cilium/sig-datapath
@@ -643,11 +642,8 @@ Makefile* @cilium/build
 /test/runtime/chaos_agent.go @cilium/sig-agent @cilium/ci-structure
 /tools/ @cilium/contributing
 /USERS.md @cilium/community
-Vagrantfile @cilium/ci-structure
-/Vagrantfile @cilium/contributing
 /go.sum @cilium/vendor
 /go.mod @cilium/vendor
-/vagrant_box_defaults.rb @cilium/ci-structure
 /vendor/ @cilium/vendor
 /VERSION @cilium/release-managers
 /.clang-format @cilium/contributing
diff --git a/Documentation/contributing/development/dev_setup.rst b/Documentation/contributing/development/dev_setup.rst
index e3fba64ed81fd..965b746f29d3c 100644
--- a/Documentation/contributing/development/dev_setup.rst
+++ b/Documentation/contributing/development/dev_setup.rst
@@ -91,16 +91,6 @@ For `integration_testing`, you will need to run ``docker`` without privileges.
 You can usually achieve this by adding your current user to the ``docker``
 group.
 
-Finally, in order to run Cilium locally on VMs, you need:
-
-+------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------+
-| Dependency                                                 | Version / Commit ID   | Download Command                                                               |
-+============================================================+=======================+================================================================================+
-| `Vagrant <https://www.vagrantup.com/downloads>`_           | >= 2.0                | `Vagrant Install Instructions <https://www.vagrantup.com/docs/installation>`_  |
-+------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------+
-| `VirtualBox <https://www.virtualbox.org/wiki/Downloads>`_  | >= 5.2                | N/A (OS-specific)                                                              |
-+------------------------------------------------------------+-----------------------+--------------------------------------------------------------------------------+
-
 Kind-based Setup (preferred)
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -183,363 +173,6 @@ the clusters it creates. The following parameters are the most commonly used:
 
 For more environment variables, see ``contrib/scripts/kind.sh``.
 
-Vagrant Setup
-~~~~~~~~~~~~~
-
-The setup for the Vagrantfile in the root of the Cilium tree depends on a
-number of environment variables and network setup that are managed via
-``contrib/vagrant/start.sh``.
-
-Option 1 - Using the Provided Vagrantfiles
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-To bring up a Vagrant VM with Cilium plus dependencies installed, run:
-
-.. code-block:: shell-session
-
-    $ contrib/vagrant/start.sh [vm_name]
-
-This will create and run a vagrant VM based on the base box ``cilium/ubuntu``.
-The ``vm_name`` argument is optional and allows you to add new nodes to an
-existing cluster. For example, to add a net-next VM to a one-node cluster:
-
-.. code-block:: shell-session
-
-    $ K8S=1 NWORKERS=1 NETNEXT=1 ./contrib/vagrant/start.sh k8s2+
-
-Cilium Vagrantfiles look for a file ``.devvmrc`` in the root of your
-Cilium repository. This file is ignored for Git, so it does not exist
-by default. If this file exists and is executable, it will be executed
-in the beginning of the VM bootstrap. This allows you to automatically
-customize the new VM, e.g., with your personal Git configuration. You
-may also want to add any local entries you need in ``/etc/hosts``,
-etc.
-
-For example, you could have something like this in your ``.devvmrc``:
-
-.. code-block:: bash
-
-    #!/usr/bin/env bash
-
-    git config --global user.name "Firstname Lastname"
-    git config --global user.email developer@company.com
-
-    sudo tee -a /etc/hosts <<EOF
-    192.168.99.99 nas
-    EOF
-
-Remember to make the script executable (``chmod +x .devvmrc``). When
-successfully running, the VM bootstrap shows a message like this right
-after the shared folders have been set up:
-
-::
-
-    runtime: ----------------------------------------------------------------
-    runtime: Executing .devvmrc
-
-The box is currently available for the following providers:
-
-* virtualbox
-
-Configuration Options
-^^^^^^^^^^^^^^^^^^^^^
-
-The following environment variables can be set to customize the VMs
-brought up by vagrant:
-
-* ``NWORKERS=n``: Number of child nodes you want to start with the master,
-  default 0.
-* ``RELOAD=1``: Issue a ``vagrant reload`` instead of ``vagrant up``, useful
-  to resume halted VMs.
-* ``NO_PROVISION=1``: Avoid provisioning Cilium inside the VM. Supports quick
-  restart without recompiling all of Cilium.
-* ``K8S=1``: Build & install kubernetes on the nodes. ``k8s1`` is the master
-  node, which contains both master components: etcd, kube-controller-manager,
-  kube-scheduler, kube-apiserver, and node components: kubelet,
-  kube-proxy, kubectl and Cilium. When used in combination with ``NWORKERS=1`` a
-  second node is created, where ``k8s2`` will be a kubernetes node, which
-  contains: kubelet, kube-proxy, kubectl and cilium.
-* ``NETNEXT=1``: Run with net-next kernel.
-* ``SERVER_BOX`` and ``SERVER_VERSION``: Run with a specified vagrant
-  box. See: ``vagrant_box_defaults.rb`` for the supported
-  versions.
-* ``IPV4=1``: Run Cilium with IPv4 enabled.
-* ``RUNTIME=x``: Sets up the container runtime to be used inside a kubernetes
-  cluster. Valid options are: ``containerd`` and ``crio``. If not
-  set, it defaults to ``containerd``.
-* ``VM_SET_PROXY=https://127.0.0.1:80/`` Sets up VM's ``https_proxy``.
-* ``INSTALL=1``: Restarts the installation of Cilium, Kubernetes, etc. Only
-  useful when the installation was interrupted.
-* ``MAKECLEAN=1``: Execute ``make clean`` before building cilium in the VM.
-* ``NO_BUILD=1``: Does not run the "build" provision step in the VM. Assumes
-  the developer had previously executed ``make build`` before provisioning the
-  VM.
-* ``SHARE_PARENT``: Share the parent of your Cilium directory instead. This
-  requires your Cilium directory to be named ``cilium``, but will also make
-  all other files and folders in the parent directory available for the VM.
-  This is useful to share all the cilium repos to the VM, for example.
-* ``USER_MOUNTS``: Additional mounts for the VM in a comma-separated list of
-  mount specifications. Each mount specification can be simply a directory name
-  relative to the home directory, or include a '=' character separating the
-  destination mount point from the host directory. For example:
-
-  * ``USER_MOUNTS=foo``
-
-    * Mounts host directory ``~/foo`` as ``/home/vagrant/foo``
-
-  * ``USER_MOUNTS=foo,/tmp/bar=/tmp/bar``
-
-    * Mounts host directory ``~/foo`` as ``/home/vagrant/foo`` in the VM, and host
-      directory ``/tmp/bar`` as ``/tmp/bar`` in the VM.
-
-* ``VM_MEMORY``: Memory in megabytes to configure for the VMs (default 4096).
-* ``VM_CPUS``: Number of CPUs to configure for the VMs (default 2).
-
-If you want to start the VM with cilium enabled with ``containerd``, with
-kubernetes installed and plus a worker, run:
-
-.. code-block:: shell-session
-
-    $ RUNTIME=containerd K8S=1 NWORKERS=1 contrib/vagrant/start.sh
-
-If you want to get VM status, run:
-
-.. code-block:: shell-session
-
-    $ RUNTIME=containerd K8S=1 NWORKERS=1 vagrant status
-
-If you want to connect to the Kubernetes cluster running inside the developer VM via ``kubectl`` from your host machine, set ``KUBECONFIG`` environment variable to include new kubeconfig file:
-
-.. code-block:: shell-session
-
-    $ export KUBECONFIG=$KUBECONFIG:${PATH_TO_CILIUM_REPO}/vagrant.kubeconfig
-
-where ``PATH_TO_CILIUM_REPO`` is the path of your local clone of the Cilium git repository. Also add ``127.0.0.1 k8s1`` to your hosts file.
-
-If you have any issue with the provided vagrant box
-``cilium/ubuntu`` or need a different box format, you may
-build the box yourself using the `packer scripts <https://github.com/cilium/packer-ci-build>`_
-
-Launch CI VMs
-^^^^^^^^^^^^^
-
-The ``test`` directory also contains a ``Vagrantfile`` that can be
-used to bring up the CI VM images that will cache a Vagrant box
-locally (in ``test/.vagrant/`` that prepulls all the docker images
-needed for the CI tests. Unfortunately some of the options are different
-from the main Vagrantfile, for example:
-
-- ``K8S_NODES`` determines the total number of k8s nodes, including the master.
-  - ``NWORKERS`` is not supported.
-- ``USER_MOUNTS`` is not available.
-
-To start a local k8s 1.18 cluster with one CI VM locally, run:
-
-.. code-block:: shell-session
-
-    $ cd test
-    $ K8S_VERSION=1.18 K8S_NODES=1 ./vagrant-local-start.sh
-
-This will first destroy any CI VMs you may have running on the current
-``K8S_VERSION``, and then create a local Vagrant box if not already
-created. This can take some time.
-
-VM preloading can be turned off by exporting ``PRELOAD_VM=false``. You
-can run ``make clean`` in ``test`` to delete the cached vagrant box.
-
-To start the CI runtime VM locally, run:
-
-.. code-block:: shell-session
-
-    $ cd test
-    $ ./vagrant-local-start-runtime.sh
-
-The runtime VM is connected to the same private VirtualBox network as
-the local CI k8s nodes.
-
-The runtime VM uses the same cached box as the k8s nodes, but does not start
-K8s, but runs Cilium as a systemd service.
-
-Option 2 - Manual Installation
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-Alternatively you can import the vagrant box ``cilium/ubuntu``
-directly and manually install Cilium:
-
-.. code-block:: shell-session
-
-        $ vagrant init cilium/ubuntu
-        $ vagrant up
-        $ vagrant ssh [...]
-        $ go get github.com/cilium/cilium
-        $ cd go/src/github.com/cilium/cilium/
-        $ make
-        $ sudo make install
-        $ sudo mkdir -p /etc/sysconfig/
-        $ sudo cp contrib/systemd/cilium.service /etc/systemd/system/
-        $ sudo cp contrib/systemd/cilium-docker.service /etc/systemd/system/
-        $ sudo cp contrib/systemd/cilium  /etc/sysconfig/cilium
-        $ sudo usermod -a -G cilium vagrant
-        $ sudo systemctl enable cilium-docker
-        $ sudo systemctl restart cilium-docker
-        $ sudo systemctl enable cilium
-        $ sudo systemctl restart cilium
-
-Notes
-^^^^^
-
-Your Cilium tree is mapped to the VM so that you do not need to keep manually
-copying files between your host and the VM. Folders are by default synced
-automatically using `VirtualBox Shared Folders <https://www.virtualbox.org/manual/ch04.html#sharedfolders>`_
-with NFS. Note that your host firewall must have a variety of ports open. The
-Vagrantfile will inform you of the configuration of these addresses and ports
-to enable NFS.
-
-.. note::
-
-   Although providing a Developer preview for macOS/arm64 (M1/M2) hosts, 
-   Oracle is not going to offer official support for ARM64 on Mac. As of VirtualBox 7.0.6
-   the developer preview is *not* working with the Cilium Vagrant Setup.
-   
-.. note::
-
-   OSX file system is by default case insensitive, which can confuse
-   git.  At the writing of this Cilium repo has no file names that
-   would be considered referring to the same file on a case
-   insensitive file system.  Regardless, it may be useful to create a
-   disk image with a case sensitive file system for holding your git
-   repos.
-
-.. note::
-
-   VirtualBox for OSX currently (version 5.1.22) always reports
-   host-only networks' prefix length as 64.  Cilium needs this prefix
-   to be 16, and the startup script will check for this.  This check
-   always fails when using VirtualBox on OSX, but it is safe to let
-   the startup script to reset the prefix length to 16.
-
-.. note::
-
-   Make sure your host NFS configuration is setup to use tcp:
-
-   .. code-block:: none
-
-      # cat /etc/nfs.conf
-      ...
-      [nfsd]
-      # grace-time=90
-      tcp=y
-      # vers2=n
-      # vers3=y
-      ...
-
-.. note::
-
-   Linux 5.18 on newer Intel CPUs which support Intel CET (11th and
-   12th gen) has a bug that prevents the VMs from starting. If you see
-   a stacktrace with ``kernel BUG at arch/x86/kernel/traps.c`` and
-   ``traps: Missing ENDBR`` messages in dmesg, that means you are
-   affected. A workaround for now is to pass ``ibt=off`` to the kernel
-   command line.
-
-.. note::
-
-   VirtualBox for Ubuntu desktop might have network issues after
-   suspending and resuming the host OS (typically by closing and
-   re-opening the laptop lid). If the ``cilium-dbg status`` keeps showing
-   unreachable from nodes but reachable from endpoints, you could
-   hit this. Run the following code on each VM to rebuild routing
-   and neighbor entries:
-
-   .. code-block:: shell-session
-
-      # assume we deployed the cluster with "NWORKERS=1" and "NETNEXT=1"
-
-      # fetch ipv6 addresses
-      $ ipv6_k8s1=$(vagrant ssh k8s1+ -c 'ip -6 --br a sh enp0s9 scope global' | awk '{print $3}')
-      $ ipv6_k8s2=$(vagrant ssh k8s2+ -c 'ip -6 --br a sh enp0s9 scope global' | awk '{print $3}')
-
-      # fetch mac addresses
-      $ mac_k8s1=$(vagrant ssh k8s1+ -c 'ip --br l sh enp0s9' | awk '{print $3}')
-      $ mac_k8s2=$(vagrant ssh k8s2+ -c 'ip --br l sh enp0s9' | awk '{print $3}')
-
-      # add route
-      $ vagrant ssh k8s1+ -c 'ip -6 r a fd00::/16 dev enp0s9'
-      $ vagrant ssh k8s2+ -c 'ip -6 r a fd00::/16 dev enp0s9'
-
-      # add neighbor
-      $ vagrant ssh k8s1+ -c "ip n r $ipv6_k8s2 dev enp0s9 lladdr $mac_k8s2 nud reachable"
-      $ vagrant ssh k8s2+ -c "ip n r $ipv6_k8s1 dev enp0s9 lladdr $mac_k8s1 nud reachable"
-
-If for some reason, running of the provisioning script fails, you should bring the VM down before trying again:
-
-.. code-block:: shell-session
-
-    $ vagrant halt
-
-Local Development in Vagrant Box
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-See :ref:`dev_env` for information on how to setup the development environment.
-
-When the development VM is provisioned, it builds and installs Cilium.  After
-the initial build and install you can do further building and testing
-incrementally inside the VM. ``vagrant ssh`` takes you to the Cilium source
-tree directory (``/home/vagrant/go/src/github.com/cilium/cilium``) by default,
-and the following commands assume that you are working within that directory.
-
-Build Cilium
-^^^^^^^^^^^^
-
-When you make changes, the tree is automatically kept in sync via NFS.
-You can issue a build as follows:
-
-.. code-block:: shell-session
-
-    $ make
-
-Install to dev environment
-^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-After a successful build and test you can re-install Cilium by:
-
-.. code-block:: shell-session
-
-    $ sudo -E make install
-
-Restart Cilium service
-^^^^^^^^^^^^^^^^^^^^^^
-
-To run the newly installed version of Cilium, restart the service:
-
-.. code-block:: shell-session
-
-    $ sudo systemctl restart cilium
-
-You can verify the service and cilium-agent status by the following
-commands, respectively:
-
-.. code-block:: shell-session
-
-    $ sudo systemctl status cilium
-    $ cilium-dbg status
-
-Simple smoke-test with HTTP policies
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-After Cilium daemon has been restarted, you may want to verify that it
-boots up properly and integration with Envoy still works. To do this,
-run this bash test script:
-
-.. code-block:: shell-session
-
-    $ test/envoy/envoy-smoke-test.sh
-
-This test launches three docker containers (one curl client, and two
-httpd servers) and tests various simple network policies with
-them. These containers should be automatically removed when the test
-finishes.
-
 .. _making_changes:
 
 Making Changes
@@ -590,8 +223,6 @@ Making Changes
    tests
 #. If you are making documentation changes, you can generate documentation files
    and serve them locally on ``http://localhost:9081`` by running ``make render-docs``.
-   This make target works both inside and outside the Vagrant VM, assuming that ``docker``
-   is running in the environment.
 
 Dev Container
 -------------
@@ -808,9 +439,6 @@ Minor version
 
 #. Bump the kindest/node version in all of kind's config files (for example, ``.github/kind-config*``).
 
-#. Bump the Kubernetes version in ``contrib/vagrant/scripts/helpers.bash`` and
-   the etcd version to the latest version.
-
 #. Run ``./contrib/scripts/check-k8s-code-gen.sh``
 
 #. Run ``go mod vendor && go mod tidy``
diff --git a/Documentation/contributing/testing/e2e_legacy.rst b/Documentation/contributing/testing/e2e_legacy.rst
index 0cf714ff9954e..3c821f8343230 100644
--- a/Documentation/contributing/testing/e2e_legacy.rst
+++ b/Documentation/contributing/testing/e2e_legacy.rst
@@ -46,14 +46,6 @@ GitHub Actions provide an alternative mode for running Cilium's end-to-end tests
 The configuration is set up to closely match the environment used in GHA. Refer
 to the relevant documentation for instructions on running tests using GHA.
 
-Running Tests with Vagrant
-^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-To run tests locally using Vagrant, the test scripts invoke ``vagrant`` to create
-virtual machine(s). These tests utilize the Ginkgo testing framework, leveraging
-its rich capabilities and the benefits of Go's compilation-time checks and
-strong typing.
-
 Running End-To-End Tests
 ~~~~~~~~~~~~~~~~~~~~~~~~
 
diff --git a/Vagrantfile b/Vagrantfile
deleted file mode 100644
index 47ef1a0524251..0000000000000
--- a/Vagrantfile
+++ /dev/null
@@ -1,369 +0,0 @@
-# -*- mode: ruby -*-
-# vi: set ft=ruby :
-
-# The source of truth for vagrant box versions.
-# Sets SERVER_BOX, SERVER_VERSION, NETNEXT_SERVER_BOX and NETNEXT_SERVER_VERSION
-# Accepts overrides from env variables
-require_relative 'vagrant_box_defaults.rb'
-$SERVER_BOX = (ENV['SERVER_BOX'] || $SERVER_BOX)
-$SERVER_VERSION= (ENV['SERVER_VERSION'] || $SERVER_VERSION)
-$NETNEXT_SERVER_BOX = (ENV['NETNEXT_SERVER_BOX'] || $NETNEXT_SERVER_BOX)
-$NETNEXT_SERVER_VERSION= (ENV['NETNEXT_SERVER_VERSION'] || $NETNEXT_SERVER_VERSION)
-$NO_BUILD = (ENV['NO_BUILD'] || "0")
-
-if ENV['NETNEXT'] == "true" || ENV['NETNEXT'] == "1" then
-    $SERVER_BOX = $NETNEXT_SERVER_BOX
-    $SERVER_VERSION = $NETNEXT_SERVER_VERSION
-    $vm_kernel = '+'
-end
-
-Vagrant.require_version ">= 2.0.0"
-
-if ARGV.first == "up" && ENV['CILIUM_SCRIPT'] != 'true'
-    raise Vagrant::Errors::VagrantError.new, <<END
-Calling 'vagrant up' directly is not supported.  Instead, please run the
-following to deploy a single-node cluster:
-$ ./contrib/vagrant/start.sh
-
-See the development guide for available configuration options:
-https://docs.cilium.io/en/latest/contributing/development/dev_setup
-END
-end
-
-if ENV['IPV4'] == '0'
-    raise Vagrant::Errors::VagrantError.new, <<END
-Disabling IPv4 is currently not allowed until k8s 1.9 is released
-END
-end
-
-# Workaround issue as described here:
-# https://github.com/cilium/cilium/pull/12520
-class VagrantPlugins::ProviderVirtualBox::Action::Network
-  def dhcp_server_matches_config?(dhcp_server, config)
-    true
-  end
-end
-
-$cleanup = <<SCRIPT
-i=1
-while [ "$i" -le "$((num_workers+1))" ]; do
-    VBoxManage natnetwork add --netname natnet$i --network 192.168.0.0/16 --ipv6 on --enable
-    i=$((i+1))
-done 2>/dev/null
-
-res=0
-while [ "$res" == "0" ]; do
-    VBoxManage natnetwork remove --netname natnet$i
-    res=$?
-    i=$((i+1))
-done 2>/dev/null
-SCRIPT
-
-$bootstrap = <<SCRIPT
-set -o errexit
-set -o nounset
-set -o pipefail
-
-if [ -x /home/vagrant/go/src/github.com/cilium/cilium/.devvmrc ] ; then
-   echo "----------------------------------------------------------------"
-   echo "Executing .devvmrc"
-   /home/vagrant/go/src/github.com/cilium/cilium/.devvmrc || true
-fi
-
-echo "----------------------------------------------------------------"
-export PATH=/home/vagrant/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games
-
-echo "editing journald configuration"
-bash -c "echo RateLimitIntervalSec=1s >> /etc/systemd/journald.conf"
-bash -c "echo RateLimitBurst=10000 >> /etc/systemd/journald.conf"
-echo "restarting systemd-journald"
-systemctl restart systemd-journald
-echo "getting status of systemd-journald"
-service systemd-journald status
-echo "done configuring journald"
-
-service docker restart
-echo 'cd ~/go/src/github.com/cilium/cilium' >> /home/vagrant/.bashrc
-echo 'export GOPATH=$(go env GOPATH)' >> /home/vagrant/.bashrc
-chown -R vagrant:vagrant /home/vagrant 2>/dev/null || true
-curl -SsL https://github.com/cilium/bpf-map/releases/download/v1.0/bpf-map -o bpf-map
-chmod +x bpf-map
-mv bpf-map /usr/bin
-SCRIPT
-
-$makeclean = ENV['MAKECLEAN'] ? "export MAKECLEAN=1" : ""
-$build = <<SCRIPT
-set -o errexit
-set -o nounset
-set -o pipefail
-
-export PATH=/home/vagrant/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games
-#{$makeclean}
-~/go/src/github.com/cilium/cilium/contrib/vagrant/build.sh
-rm -fr ~/go/bin/cilium*
-SCRIPT
-
-$install = <<SCRIPT
-set -o errexit
-set -o nounset
-set -o pipefail
-
-# Add an exception for the cilium repo for the root user to fix the
-# "fatal: unsafe repository ('/home/vagrant/go/src/github.com/cilium/cilium' is owned by someone else)"
-# error condition when running `sudo make install`
-git config --global --add safe.directory /home/vagrant/go/src/github.com/cilium/cilium
-
-sudo -E make -C /home/vagrant/go/src/github.com/cilium/cilium/ install
-
-sudo mkdir -p /etc/sysconfig
-sudo cp /home/vagrant/go/src/github.com/cilium/cilium/contrib/systemd/cilium-docker.service /lib/systemd/system
-sudo cp /home/vagrant/go/src/github.com/cilium/cilium/contrib/systemd/cilium-etcd.service /lib/systemd/system
-sudo cp /home/vagrant/go/src/github.com/cilium/cilium/contrib/systemd/cilium.service /lib/systemd/system
-sudo cp /home/vagrant/go/src/github.com/cilium/cilium/contrib/systemd/cilium-operator.service /lib/systemd/system
-sudo cp /home/vagrant/go/src/github.com/cilium/cilium/contrib/systemd/cilium /etc/sysconfig
-
-getent group cilium >/dev/null || sudo groupadd -r cilium
-sudo usermod -a -G cilium vagrant
-SCRIPT
-
-$node_ip_base = ENV['IPV4_BASE_ADDR'] || ""
-$node_nfs_base_ip = ENV['IPV4_BASE_ADDR_NFS'] || ""
-$num_workers = (ENV['NWORKERS'] || 0).to_i
-$workers_ipv4_addrs = $num_workers.times.collect { |n| $node_ip_base + "#{n+(ENV['FIRST_IP_SUFFIX']).to_i+1}" }
-$workers_ipv4_addrs_nfs = $num_workers.times.collect { |n| $node_nfs_base_ip + "#{n+(ENV['FIRST_IP_SUFFIX_NFS']).to_i+1}" }
-$master_ip = ENV['MASTER_IPV4']
-$master_ipv6 = ENV['MASTER_IPV6_PUBLIC']
-$workers_ipv6_addrs_str = ENV['IPV6_PUBLIC_WORKERS_ADDRS'] || ""
-$workers_ipv6_addrs = $workers_ipv6_addrs_str.split(' ')
-
-# Create unique ID for use in vboxnet name so Jenkins pipeline can have concurrent builds.
-$job_name = ENV['JOB_BASE_NAME'] || "local"
-
-$build_number = ENV['BUILD_NUMBER'] || "0"
-$build_id = "#{$job_name}-#{$build_number}"
-
-# Only create the build_id_name for Jenkins environment so that
-# we can run VMs locally without having any the `build_id` in the name.
-if ENV['BUILD_NUMBER'] then
-    $build_id_name = "-build-#{$build_id}"
-end
-
-if ENV['K8S'] then
-    $vm_base_name = "k8s"
-else
-    $vm_base_name = "runtime"
-end
-
-# Set locate to en_US.UTF-8
-ENV["LC_ALL"] = "en_US.UTF-8"
-ENV["LC_CTYPE"] = "en_US.UTF-8"
-
-if ENV['CILIUM_SCRIPT'] != 'true' then
-    Vagrant.configure(2) do |config|
-        config.vm.define "runtime1"
-        config.vm.define "k8s1"
-        config.vm.define "k8s2"
-        config.vm.define "k8s1+"
-        config.vm.define "k8s2+"
-    end
-end
-
-Vagrant.configure(2) do |config|
-    config.trigger.before :up, :provision, :reload do |trigger|
-        trigger.run = {inline: "bash -c '#{$cleanup}'"}
-    end
-
-    config.vm.provision "bootstrap", type: "shell", inline: $bootstrap
-    if $NO_BUILD == "0" then
-        config.vm.provision "build", type: "shell", run: "always", privileged: false, inline: $build
-    end
-    config.vm.provision "install", type: "shell", run: "always", privileged: false, inline: $install
-    config.vm.box_check_update = false
-
-    config.vm.provider "virtualbox" do |vb|
-        # Do not inherit DNS server from host, use proxy
-        vb.customize ["modifyvm", :id, "--natdnshostresolver1", "on"]
-        vb.customize ["modifyvm", :id, "--natdnsproxy1", "on"]
-
-        # Prevent VirtualBox from interfering with host audio stack
-        vb.customize ["modifyvm", :id, "--audio", "none"]
-
-        # Enable HPET, the Go scheduler heavily relies on accurate timers.
-        vb.customize ["modifyvm", :id, "--hpet", "on"]
-
-        config.vm.box = $SERVER_BOX
-        config.vm.box_version = $SERVER_VERSION
-        vb.memory = ENV['VM_MEMORY'].to_i
-        vb.cpus = ENV['VM_CPUS'].to_i
-    end
-
-    master_vm_name = "#{$vm_base_name}1#{$build_id_name}#{$vm_kernel}"
-    config.vm.define master_vm_name, primary: true do |cm|
-        node_ip = "#{$master_ip}"
-        node_ipv6 = "#{$master_ipv6}"
-        cm.vm.network "forwarded_port", guest: 6443, host: 7443, auto_correct: true
-        cm.vm.network "forwarded_port", guest: 9081, host: 9081, auto_correct: true
-        # 2345 is the default delv server port
-        cm.vm.network "forwarded_port", guest: 2345, host: 2345, auto_correct: true
-        cm.vm.network "private_network", ip: "#{$master_ip}",
-            virtualbox__intnet: "cilium-test-#{$build_id}"
-        if ENV['FIRST_IP_SUFFIX_NFS'] then
-            $nfs_ipv4_master_addr = $node_nfs_base_ip + "#{ENV['FIRST_IP_SUFFIX_NFS']}"
-        end
-        cm.vm.network "private_network", ip: "#{$nfs_ipv4_master_addr}", bridge: "enp0s9"
-        # Add IPv6 address this way or we get hit by a virtualbox bug
-        cm.vm.provision "ipv6-config",
-            type: "shell",
-            run: "always",
-            inline: "ip -6 a a #{$master_ipv6}/16 dev enp0s9"
-        if ENV["IPV6_EXT"] then
-            node_ip = "#{$master_ipv6}"
-        end
-
-        # Interface for the IPv6 NAT Service. The IP address doesn't matter as
-        # it won't be used. We use an IPv4 address as newer versions of VBox
-        # reject all IPv6 addresses.
-        cm.vm.network "private_network",
-            ip: "192.168.59.15"
-        cm.vm.provider "virtualbox" do |vb|
-            vb.customize ["modifyvm", :id, "--nic4", "natnetwork"]
-            vb.customize ["modifyvm", :id, "--nat-network4", "natnet1"]
-        end
-        cm.vm.provision "ipv6-nat-config",
-            type: "shell",
-            run: "always",
-            inline: "ip -6 r a default via fd17:625c:f037:2::1 dev enp0s10 || true"
-
-        cm.vm.hostname = "#{$vm_base_name}1"
-        if ENV['CILIUM_TEMP'] then
-           if ENV["K8S"] then
-               k8sinstall = "#{ENV['CILIUM_TEMP']}/cilium-k8s-install-1st-part.sh"
-               cm.vm.provision "k8s-install-master-part-1",
-                   type: "shell",
-                   run: "always",
-                   env: {"node_ip" => node_ip, "node_ipv6" => node_ipv6},
-                   privileged: true,
-                   path: k8sinstall
-           end
-           script = "#{ENV['CILIUM_TEMP']}/node-1.sh"
-           cm.vm.provision "config-install", type: "shell", privileged: true, run: "always", path: script
-           # In k8s mode cilium needs etcd in order to run which was started in
-           # the first part of the script. The 2nd part will install the
-           # policies into kubernetes and cilium.
-           if ENV["K8S"] then
-               k8sinstall = "#{ENV['CILIUM_TEMP']}/cilium-k8s-install-2nd-part.sh"
-               cm.vm.provision "k8s-install-master-part-2",
-                   type: "shell",
-                   run: "always",
-                   env: {"node_ip" => node_ip, "node_ipv6" => node_ipv6},
-                   privileged: true,
-                   path: k8sinstall
-           end
-        end
-    end
-
-    $num_workers.times do |n|
-        # n starts with 0
-        node_vm_name = "#{$vm_base_name}#{n+2}#{$build_id_name}#{$vm_kernel}"
-        node_hostname = "#{$vm_base_name}#{n+2}"
-        config.vm.define node_vm_name do |node|
-            node_ip = $workers_ipv4_addrs[n]
-            node_ipv6 = $workers_ipv6_addrs[n]
-            node.vm.network "private_network", ip: "#{node_ip}",
-                virtualbox__intnet: "cilium-test-#{$build_id}"
-            nfs_ipv4_addr = $workers_ipv4_addrs_nfs[n]
-            node.vm.network "private_network", ip: "#{nfs_ipv4_addr}", bridge: "enp0s9"
-            # Add IPv6 address this way or we get hit by a virtualbox bug
-            node.vm.provision "ipv6-config",
-                type: "shell",
-                run: "always",
-                inline: "ip -6 a a #{node_ipv6}/16 dev enp0s9"
-
-            # Interface for the IPv6 NAT Service. The IP address doesn't matter
-            # as it won't be used. We use an IPv4 address as newer versions of
-            # VBox reject all IPv6 addresses.
-            node.vm.network "private_network",
-                ip: "192.168.59.15"
-            node.vm.provider "virtualbox" do |vb|
-                vb.customize ["modifyvm", :id, "--nic4", "natnetwork"]
-                vb.customize ["modifyvm", :id, "--nat-network4", "natnet#{n+2}"]
-            end
-            node.vm.provision "ipv6-nat-config",
-                type: "shell",
-                run: "always",
-                inline: "ip -6 r a default via fd17:625c:f037:2::1 dev enp0s10 || true"
-
-            if ENV["IPV6_EXT"] then
-                node_ip = "#{node_ipv6}"
-            end
-            node.vm.hostname = "#{node_hostname}"
-            if ENV['CILIUM_TEMP'] then
-                if ENV["K8S"] then
-                    k8sinstall = "#{ENV['CILIUM_TEMP']}/cilium-k8s-install-1st-part.sh"
-                    node.vm.provision "k8s-install-node-part-1",
-                        type: "shell",
-                        run: "always",
-                        env: {"node_ip" => node_ip, "node_ipv6" => node_ipv6},
-                        privileged: true,
-                        path: k8sinstall
-                end
-                script = "#{ENV['CILIUM_TEMP']}/node-#{n+2}.sh"
-                node.vm.provision "config-install", type: "shell", privileged: true, run: "always", path: script
-                if ENV["K8S"] then
-                    k8sinstall = "#{ENV['CILIUM_TEMP']}/cilium-k8s-install-2nd-part.sh"
-                    node.vm.provision "k8s-install-node-part-2",
-                        type: "shell",
-                        run: "always",
-                        env: {"node_ip" => node_ip, "node_ipv6" => node_ipv6},
-                        privileged: true,
-                        path: k8sinstall
-                end
-            end
-        end
-    end
-    cilium_dir = '.'
-    cilium_path = '/home/vagrant/go/src/github.com/cilium/cilium'
-    if ENV["SHARE_PARENT"] == "2" then
-      cilium_dir = '../..'
-      cilium_path = '/home/vagrant/go/src/github.com'
-    elsif ENV["SHARE_PARENT"] then
-      cilium_dir = '..'
-      cilium_path = '/home/vagrant/go/src/github.com/cilium'
-    end
-    config.vm.synced_folder cilium_dir, cilium_path, type: "nfs", nfs_udp: false
-    # Don't forget to enable this ports on your host before starting the VM
-    # in order to have nfs working
-    # iptables -I INPUT -s 192.168.61.0/24 -j ACCEPT"
-    # if using nftables, in Fedora (with firewalld), use:
-    # nft -f ./contrib/vagrant/nftables.rules
-
-    if ENV['USER_MOUNTS'] then
-        # Allow multiple mounts divided by commas
-        ENV['USER_MOUNTS'].split(",").each do |mnt|
-            # Split "<to>=<from>"
-            user_mount = mnt.split("=", 2)
-            # Only one element, assume a path relative to home directories in both ends
-            if user_mount.length == 1 then
-                user_mount_to = "/home/vagrant/" + user_mount[0]
-                user_mount_from = "~/" + user_mount[0]
-            else
-                user_mount_to = user_mount[0]
-                # Remove "~/" prefix if any.
-                if user_mount_to.start_with?('~/') then
-                    user_mount_to[0..1] = ''
-                end
-                # Add home directory prefix for non-absolute paths
-                if !user_mount_to.start_with?('/') then
-                    user_mount_to = "/home/vagrant/" + user_mount_to
-                end
-                user_mount_from = user_mount[1]
-                # Add home prefix for host for any path in the project directory
-                # as it is already mounted.
-                if !user_mount_from.start_with?('/', '.', '~') then
-                    user_mount_from = "~/" + user_mount_from
-                end
-            end
-            config.vm.synced_folder "#{user_mount_from}", "#{user_mount_to}", type: "nfs", nfs_udp: false
-        end
-    end
-end
diff --git a/contrib/scripts/add_vagrant_box.sh b/contrib/scripts/add_vagrant_box.sh
deleted file mode 100755
index f3cca81f953af..0000000000000
--- a/contrib/scripts/add_vagrant_box.sh
+++ /dev/null
@@ -1,184 +0,0 @@
-#!/usr/bin/env bash
-
-set -euo pipefail
-
-check_cmd() {
-    for cmd in "$@" ; do
-        if ! (command -v "$cmd" >/dev/null) ; then
-            echo "Error: $cmd not found."
-            exit 1
-        fi
-    done
-}
-check_cmd curl vagrant
-
-usage() {
-    echo -e "usage: add_vagrant_box.sh [options] [vagrant_box_defaults.rb path]"
-    echo -e "\tpath to vagrant_box_defaults.rb defaults to ./vagrant_box_defaults.rb"
-    echo -e ""
-    echo -e "options:"
-    echo -e "\t-a\t\tuse aria2c instead of curl"
-    echo -e "\t-b <box>\tdownload selected box (defaults: ubuntu ubuntu-next)"
-    echo -e "\t-d <dir>\tdownload to dir instead of /tmp/"
-    echo -e "\t-l\t\tdownload latest versions instead of using vagrant_box_defaults"
-    echo -e "\t-h\t\tdisplay this help"
-    echo -e ""
-    echo -e "examples:"
-    echo -e "\tdownload boxes ubuntu and ubuntu-next from vagrant_box_defaults.rb:"
-    echo -e "\t\$ add_vagrant_box.sh \$HOME/go/src/github.com/cilium/cilium/vagrant_box_defaults.rb"
-    echo -e "\tdownload latest version for ubuntu-dev and ubuntu-next:"
-    echo -e "\t\$ add_vagrant_box.sh -l -b ubuntu-dev -b ubuntu-next"
-    echo -e "\tsame as above, downloading into /tmp/foo and using aria2c:"
-    echo -e "\t\$ add_vagrant_box.sh -al -d /tmp/foo -b ubuntu-dev -b ubuntu-next"
-    exit 1
-}
-
-boxes="ubuntu ubuntu-dev"
-box_dir="$HOME/.vagrant.d/boxes/cilium-VAGRANTSLASH-"
-box_info="https://app.vagrantup.com/api/v1/search?q=cilium/"
-vagrant_url="http://vagrant-cache.ci.cilium.io/cilium/"
-version=0
-custom_types=0
-latest=0
-use_aria2=0
-aria2c="aria2c -x16 -s16 -c --auto-file-renaming=false --console-log-level=warn --summary-interval=0"
-outdir="/tmp"
-path=/dev/null
-
-OPTIND=1
-while getopts "ab:hld:" opt; do
-    case "$opt" in
-    h)
-        usage 0
-        ;;
-    a)
-        check_cmd aria2c
-        use_aria2=1
-        ;;
-    l)
-        check_cmd jq
-        latest=1
-        ;;
-    d)
-        outdir="$OPTARG"
-        ;;
-    b)
-        if [[ $custom_types -eq 0 ]] ; then
-            boxes=""
-        fi
-        custom_types=1
-        boxes="$boxes $OPTARG"
-        ;;
-    *)
-        echo -e "invalid option: $opt"
-        exit 1
-    esac
-done
-shift $((OPTIND-1))
-[[ "${1:-}" = "--" ]] && shift
-
-if [[ $latest -ne 1 ]] ; then
-    if [[ $# -lt 1 ]] ; then
-        if [[ -f ./vagrant_box_defaults.rb ]] ; then
-            path=vagrant_box_defaults.rb
-        else
-            usage 1
-        fi
-    else
-        path=$1
-    fi
-fi
-
-check_defaults_version() {
-    version=$(sed -n '/'$1'"$/{n;s/.*"\(.*\)"$/\1/p;q}' "$path")
-    found=1
-
-    vagrant box list | grep "$box " | grep "$version" || found=0
-    if [[ $found -eq 1 ]]; then
-        echo -e "$box:\tfound version $version used in $path, no need to preload"
-        version=0
-    else
-        echo -e "$box:\tversion $version used in $path needs to be preloaded"
-    fi
-}
-
-check_latest_version() {
-    latest_version=$(curl -s "$box_info$1" | jq '.boxes[0].current_version.version|tonumber')
-
-    current_version=$(vagrant box list | awk '/'$box' /{sub(/)/,"",$3);if($3>v){v=$3}} END{if(v)print v;else print "0"}')
-
-    if ((current_version >= latest_version)) ; then
-        echo -e "$box:\tlocal version $current_version >= remote version $latest_version, no need to preload"
-        version=0
-    else
-        echo -e "$box:\tlocal version $current_version, remote version $latest_version needs to be preloaded"
-        version=$latest_version
-    fi
-}
-
-mkdir -p "$outdir"
-
-for box in $boxes; do
-    if [[ latest -eq 1 ]] ; then
-        check_latest_version "$box"
-    else
-        check_defaults_version "$box"
-    fi
-    if [[ version -eq 0 ]] ; then
-        continue
-    fi
-
-    set +e
-    curl --fail "$vagrant_url$box/$version/lock" 2>/dev/null
-    lock_exit_code=$?
-    # check for 404 error indicating that cache is up and lock file is not in place
-    if [ $lock_exit_code -eq 22 ]; then
-        download_from_cache=true
-    else
-        # cache is down or box is locked
-        download_from_cache=false
-    fi
-
-    ret=1
-
-    if [[ $download_from_cache == true ]]; then
-        echo "adding box from cache"
-        curl --fail "$vagrant_url$box/$version/metadata.json" -o "$outdir/metadata.json"
-        ret=$?
-        if [[ $ret -eq 0 ]]; then
-            url="$vagrant_url$box/$version/package.box"
-            if [[ $use_aria2 -eq 1 ]] ; then
-                $aria2c -d "$outdir" -o package.box "$url"
-            else
-                curl "$url" -o "$outdir/package.box"
-            fi
-            ret=$?
-        fi
-        if [[ $ret -eq 0 ]]; then
-            pushd "$outdir"
-            vagrant box add metadata.json
-            ret=$?
-            popd
-        fi
-    fi
-
-    set -e
-    if [[ $ret -ne 0 ]]; then
-        echo "box locked or unavailable, adding box from vagrant cloud"
-        if [[ $use_aria2 -eq 1 ]] ; then
-            url="https://vagrantcloud.com/cilium/boxes/$box/versions/$version/providers/virtualbox.box"
-            $aria2c -d "$outdir" -o package.box "$url"
-            vagrant box add "cilium/$box" "$outdir/package.box"
-            mkdir -p "$box_dir$box"
-            if [[ ! -f $box_dir$box/metadata_url ]] ; then
-                echo -n "https://vagrantcloud.com/cilium/$box" > "$box_dir$box/metadata_url"
-            fi
-            mv "$box_dir$box/0" "$box_dir$box/$version"
-        else
-            vagrant box add "cilium/$box" --box-version "$version"
-        fi
-    fi
-
-    rm -f -- "$outdir/metadata.json"
-    rm -f -- "$outdir/package.box"
-done
diff --git a/contrib/vagrant/.gitignore b/contrib/vagrant/.gitignore
deleted file mode 100644
index 686dabfe2d35b..0000000000000
--- a/contrib/vagrant/.gitignore
+++ /dev/null
@@ -1,3 +0,0 @@
-cilium-*.sh
-node-*
-restart.sh
diff --git a/contrib/vagrant/build.sh b/contrib/vagrant/build.sh
deleted file mode 100755
index 82b4bd8a5a7e8..0000000000000
--- a/contrib/vagrant/build.sh
+++ /dev/null
@@ -1,16 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-pushd `dirname $0` > /dev/null
-P="`pwd`/../.."
-popd > /dev/null
-
-cd "$P"
-go install ./... 2> /dev/null || true
-if [ -n "${MAKECLEAN}" ]; then
-    make clean
-fi
-
-# Compile with deadlock detection during runtime tests. See GH-1654.
-LOCKDEBUG=1 make
diff --git a/contrib/vagrant/deployments/.gitignore b/contrib/vagrant/deployments/.gitignore
deleted file mode 100644
index 505053730f9da..0000000000000
--- a/contrib/vagrant/deployments/.gitignore
+++ /dev/null
@@ -1,3 +0,0 @@
-coredns-rc.yaml
-coredns-svc.yaml
-coredns-cm.yaml
diff --git a/contrib/vagrant/deployments/coredns-cm.yaml.sed b/contrib/vagrant/deployments/coredns-cm.yaml.sed
deleted file mode 100644
index e6bf3b40fcb6e..0000000000000
--- a/contrib/vagrant/deployments/coredns-cm.yaml.sed
+++ /dev/null
@@ -1,33 +0,0 @@
-# File source
-# https://raw.githubusercontent.com/kubernetes/kubernetes/release-1.28/cluster/addons/dns/coredns/coredns.yaml.base
-
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: coredns
-  namespace: kube-system
-  labels:
-      addonmanager.kubernetes.io/mode: EnsureExists
-data:
-  Corefile: |
-    .:53 {
-        errors
-        health {
-            lameduck 5s
-        }
-        ready
-        kubernetes $DNS_DOMAIN in-addr.arpa ip6.arpa {
-            pods insecure
-            fallthrough in-addr.arpa ip6.arpa
-            ttl 30
-        }
-        prometheus :9153
-        forward . /etc/resolv.conf {
-            max_concurrent 1000
-        }
-        cache 30
-        loop
-        reload
-        loadbalance
-    }
----
\ No newline at end of file
diff --git a/contrib/vagrant/deployments/coredns-controller.yaml b/contrib/vagrant/deployments/coredns-controller.yaml
deleted file mode 100644
index ab23e03007ef1..0000000000000
--- a/contrib/vagrant/deployments/coredns-controller.yaml
+++ /dev/null
@@ -1,107 +0,0 @@
-# File source with modifications to the coredns corefile
-# https://raw.githubusercontent.com/kubernetes/kubernetes/release-1.28/cluster/addons/dns/coredns/coredns.yaml.base
-# __MACHINE_GENERATED_WARNING__
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: coredns
-  namespace: kube-system
-  labels:
-    k8s-app: kube-dns
-    kubernetes.io/cluster-service: "true"
-    addonmanager.kubernetes.io/mode: Reconcile
-    kubernetes.io/name: "CoreDNS"
-spec:
-  # replicas: not specified here:
-  # 1. In order to make Addon Manager do not reconcile this replicas parameter.
-  # 2. Default is 1.
-  # 3. Will be tuned in real time if DNS horizontal auto-scaling is turned on.
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxUnavailable: 1
-  selector:
-    matchLabels:
-      k8s-app: kube-dns
-  template:
-    metadata:
-      labels:
-        k8s-app: kube-dns
-    spec:
-      securityContext:
-        seccompProfile:
-          type: RuntimeDefault
-      priorityClassName: system-cluster-critical
-      serviceAccountName: coredns
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 100
-            podAffinityTerm:
-              labelSelector:
-                matchExpressions:
-                  - key: k8s-app
-                    operator: In
-                    values: ["kube-dns"]
-              topologyKey: kubernetes.io/hostname
-      tolerations:
-        - key: "CriticalAddonsOnly"
-          operator: "Exists"
-      nodeSelector:
-        kubernetes.io/os: linux
-      containers:
-      - name: coredns
-        image: registry.k8s.io/coredns/coredns:v1.10.1
-        imagePullPolicy: IfNotPresent
-        resources:
-          limits:
-            memory: 170Mi
-          requests:
-            cpu: 100m
-            memory: 70Mi
-        args: [ "-conf", "/etc/coredns/Corefile" ]
-        volumeMounts:
-        - name: config-volume
-          mountPath: /etc/coredns
-          readOnly: true
-        ports:
-        - containerPort: 53
-          name: dns
-          protocol: UDP
-        - containerPort: 53
-          name: dns-tcp
-          protocol: TCP
-        - containerPort: 9153
-          name: metrics
-          protocol: TCP
-        livenessProbe:
-          httpGet:
-            path: /health
-            port: 8080
-            scheme: HTTP
-          initialDelaySeconds: 60
-          timeoutSeconds: 5
-          successThreshold: 1
-          failureThreshold: 5
-        readinessProbe:
-          httpGet:
-            path: /ready
-            port: 8181
-            scheme: HTTP
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            add:
-            - NET_BIND_SERVICE
-            drop:
-            - all
-          readOnlyRootFilesystem: true
-      dnsPolicy: Default
-      volumes:
-        - name: config-volume
-          configMap:
-            name: coredns
-            items:
-            - key: Corefile
-              path: Corefile
diff --git a/contrib/vagrant/deployments/coredns-sa.yaml b/contrib/vagrant/deployments/coredns-sa.yaml
deleted file mode 100644
index e85d11ccc9213..0000000000000
--- a/contrib/vagrant/deployments/coredns-sa.yaml
+++ /dev/null
@@ -1,56 +0,0 @@
-# File source with modifications to the coredns corefile
-# https://raw.githubusercontent.com/kubernetes/kubernetes/release-1.28/cluster/addons/dns/coredns/coredns.yaml.base
-# __MACHINE_GENERATED_WARNING__
-
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: coredns
-  namespace: kube-system
-  labels:
-      kubernetes.io/cluster-service: "true"
-      addonmanager.kubernetes.io/mode: Reconcile
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  labels:
-    kubernetes.io/bootstrapping: rbac-defaults
-    addonmanager.kubernetes.io/mode: Reconcile
-  name: system:coredns
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - endpoints
-  - services
-  - pods
-  - namespaces
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - discovery.k8s.io
-  resources:
-  - endpointslices
-  verbs:
-  - list
-  - watch
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  annotations:
-    rbac.authorization.kubernetes.io/autoupdate: "true"
-  labels:
-    kubernetes.io/bootstrapping: rbac-defaults
-    addonmanager.kubernetes.io/mode: EnsureExists
-  name: system:coredns
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:coredns
-subjects:
-- kind: ServiceAccount
-  name: coredns
-  namespace: kube-system
diff --git a/contrib/vagrant/deployments/coredns-svc.yaml.sed b/contrib/vagrant/deployments/coredns-svc.yaml.sed
deleted file mode 100644
index 844f9e32b2392..0000000000000
--- a/contrib/vagrant/deployments/coredns-svc.yaml.sed
+++ /dev/null
@@ -1,37 +0,0 @@
-# File source
-# https://raw.githubusercontent.com/kubernetes/kubernetes/release-1.28/cluster/addons/dns/coredns/coredns.yaml.base
-
-apiVersion: v1
-kind: Service
-metadata:
-  name: kube-dns
-  namespace: kube-system
-  annotations:
-    prometheus.io/port: "9153"
-    prometheus.io/scrape: "true"
-  labels:
-    k8s-app: kube-dns
-    kubernetes.io/cluster-service: "true"
-    addonmanager.kubernetes.io/mode: Reconcile
-    kubernetes.io/name: "CoreDNS"
-spec:
-  selector:
-    k8s-app: kube-dns
-  ipFamilyPolicy: "PreferDualStack"
-  ipFamilies:
-    - IPv4
-    - IPv6
-  clusterIP: $DNS_SERVER_IP
-  clusterIPs:
-  - $DNS_SERVER_IP
-  - $DNS_SERVER_IPV6
-  ports:
-  - name: dns
-    port: 53
-    protocol: UDP
-  - name: dns-tcp
-    port: 53
-    protocol: TCP
-  - name: metrics
-    port: 9153
-    protocol: TCP
diff --git a/contrib/vagrant/nftables.rules b/contrib/vagrant/nftables.rules
deleted file mode 100644
index 06af896750cab..0000000000000
--- a/contrib/vagrant/nftables.rules
+++ /dev/null
@@ -1 +0,0 @@
-insert rule inet firewalld filter_IN_public_allow ip saddr 192.168.61.0/24 counter accept
diff --git a/contrib/vagrant/restart-vars b/contrib/vagrant/restart-vars
deleted file mode 100644
index a30f405d3b39c..0000000000000
--- a/contrib/vagrant/restart-vars
+++ /dev/null
@@ -1,12 +0,0 @@
-^MASTER_IPV4=
-^MASTER_IPV4_NFS=
-^IPV4=
-^CILIUM_IPV6_NODE_CIDR=
-^VM_MEMORY=
-^VM_CPUS=
-^K8S=
-^YES_TO_ALL=
-^VM_SET_PROXY=
-^RELOAD=
-^NWORKERS=
-^NETNEXT=
diff --git a/contrib/vagrant/scripts/.gitignore b/contrib/vagrant/scripts/.gitignore
deleted file mode 100644
index df9128702e32a..0000000000000
--- a/contrib/vagrant/scripts/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-certs/
diff --git a/contrib/vagrant/scripts/00-create-certs.sh b/contrib/vagrant/scripts/00-create-certs.sh
deleted file mode 100755
index 1c7eed8916f3a..0000000000000
--- a/contrib/vagrant/scripts/00-create-certs.sh
+++ /dev/null
@@ -1,84 +0,0 @@
-#!/usr/bin/env bash
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-source "${dir}/helpers.bash"
-source "${dir}/cert-gen-helpers.bash"
-
-set -e
-
-certs_dir="${dir}/certs"
-mkdir -p "${certs_dir}"
-cd "${certs_dir}"
-
-master="k8s1"
-
-if [ -n "${INSTALL}" ]; then
-    download_to "${cache_dir}/cfssl" "cfssl_linux-amd64" \
-        "https://pkg.cfssl.org/R1.2/cfssl_linux-amd64"
-    chmod +x "${cache_dir}/cfssl/cfssl_linux-amd64"
-    sudo mv "${cache_dir}/cfssl/cfssl_linux-amd64" /usr/bin/cfssl
-    download_to "${cache_dir}/cfssl" "cfssljson_linux-amd64" \
-        "https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64"
-    chmod +x "${cache_dir}/cfssl/cfssljson_linux-amd64"
-    sudo mv "${cache_dir}/cfssl/cfssljson_linux-amd64" /usr/bin/cfssljson
-fi
-
-
-
-log "Generating certificates..."
-
-# Generate CA for k8s
-generate_ca_certs k8s
-
-# Generate k8s-api-server certs
-generate_server_certs k8s k8s-api-server ${master}
-
-# Generate k8s components certs so the component would be able to talk to the
-# api-server
-generate_k8s_component_certs k8s system:kube-controller-manager k8s-controller-manager
-generate_k8s_component_certs k8s system:kube-scheduler k8s-scheduler
-
-# Generate the certificates necessary for the service account credentials
-# --service-account-private-key-file in the controller manager and
-# --service-account-key-file in the kube api-server.
-generate_k8s_component_certs k8s controller-manager-sa k8s-controller-manager-sa
-
-# Generate kubelet certs so they are able to talk with api-server and have
-# the correct permissions to manage its own node
-# Leave the client cert generation to client node since master at this point
-# has no idea how many workers there are.
-generate_kubelet_client_certs k8s system:node:${master} k8s-kubelet-${master}
-generate_k8s_component_certs k8s system:kube-proxy k8s-kube-proxy-${master}
-
-# Generate kubelet client certificate so kube-apiserver can talk with kubelets
-generate_k8s_component_certs k8s kubelet-api-server kubelet-api-server
-
-# Generate CA for kubelets
-generate_ca_certs kubelet
-
-# Generate kubelet serving certificates to use to serve its endpoints
-# Leave the client cert generation to client node.
-generate_k8s_component_certs kubelet ${master} kubelet-kubelet-${master}
-
-# Generate each components certs
-generate_k8s_component_certs k8s system:kube-controller-manager k8s-controller-manager
-generate_k8s_component_certs k8s system:kube-scheduler k8s-scheduler
-
-# Generate kubectl and cilium certs as administrators of the cluster
-# it's not the safest approach but it will be enough for testing
-generate_kubectl_admin_certs k8s admin k8s-admin
-generate_kubectl_admin_certs k8s cilium k8s-cilium
-generate_kubectl_admin_certs k8s nginx k8s-nginx
-
-# Generate CA for etcd
-generate_ca_certs etcd
-
-# Generate server certificates for etcd
-generate_server_certs etcd etcd-server ${master}
-
-# Generate client certificates for each client that talks with etcd
-generate_etcd_client_certs etcd api-server etcd-k8s-api-server
-generate_etcd_client_certs etcd cilium etcd-cilium
-
-log "Generating certificates... DONE!"
diff --git a/contrib/vagrant/scripts/01-install-etcd.sh b/contrib/vagrant/scripts/01-install-etcd.sh
deleted file mode 100755
index 3bcccf4bd6e29..0000000000000
--- a/contrib/vagrant/scripts/01-install-etcd.sh
+++ /dev/null
@@ -1,83 +0,0 @@
-#!/usr/bin/env bash
-#
-# Installs, configures and starts etcd, it will use default values from
-# ./helpers.bash
-# Globals:
-#   INSTALL, if set installs ETCD binaries, otherwise it will only configure etcd
-#   ETCD_CLEAN, if set it will clean up ETCD directory `/var/lib/etcd`
-#######################################
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-source "${dir}/helpers.bash"
-
-cache_dir="${dir}/../../../hack/cache"
-
-k8s_cache_dir="${cache_dir}/k8s/${k8s_version}"
-
-log "Installing etcd..."
-
-certs_dir="${dir}/certs"
-
-set -e
-
-sudo mkdir -p /etc/etcd/
-
-cp "${certs_dir}/etcd-server.pem" \
-   "${certs_dir}/etcd-server-key.pem" \
-   "${certs_dir}/ca-etcd.pem" \
-   /etc/etcd/
-
-if [ -n "${INSTALL}" ]; then
-    download_to "${cache_dir}/etcd" "etcd-${etcd_version}-linux-amd64.tar.gz" \
-        "https://github.com/coreos/etcd/releases/download/${etcd_version}/etcd-${etcd_version}-linux-amd64.tar.gz"
-
-    cp "${cache_dir}/etcd/etcd-${etcd_version}-linux-amd64.tar.gz" .
-    tar -xvf etcd-${etcd_version}-linux-amd64.tar.gz
-
-    sudo mv etcd-${etcd_version}-linux-amd64/etcd* /usr/bin/
-fi
-
-if [ -n "${ETCD_CLEAN}" ] && [ -n "${RELOAD}" ]; then
-    sudo service etcd stop
-    sudo rm -fr /var/lib/etcd
-fi
-
-sudo mkdir -p /var/lib/etcd
-
-ETCD_NAME=master
-
-sudo tee /etc/systemd/system/etcd.service <<EOF
-[Unit]
-Description=etcd-${etcd_version}
-Documentation=https://coreos.com/etcd/docs/${etcd_version:1}/index.html
-
-[Service]
-ExecStart=/usr/bin/etcd --name ${ETCD_NAME} \\
-  --advertise-client-urls https://${controllers_ips[0]}:2379 \\
-  --data-dir=/var/lib/etcd \\
-  --initial-advertise-peer-urls https://${controllers_ips[0]}:2380 \\
-  --initial-cluster-state new \\
-  --initial-cluster-token etcd-cluster-0 \\
-  --initial-cluster ${ETCD_NAME}=https://${controllers_ips[0]}:2380 \\
-  --listen-client-urls https://${controllers_ips[0]}:2379,http://127.0.0.1:2379 \\
-  --client-cert-auth \\
-  --cert-file='/etc/etcd/etcd-server.pem' \\
-  --key-file='/etc/etcd/etcd-server-key.pem' \\
-  --trusted-ca-file='/etc/etcd/ca-etcd.pem'
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-sudo systemctl daemon-reload
-
-sudo systemctl enable etcd
-
-sudo systemctl restart etcd
-
-sudo systemctl status etcd --no-pager
-
-log "Installing etcd... DONE!"
diff --git a/contrib/vagrant/scripts/02-install-kubernetes-master.sh b/contrib/vagrant/scripts/02-install-kubernetes-master.sh
deleted file mode 100755
index 9c47899742bbc..0000000000000
--- a/contrib/vagrant/scripts/02-install-kubernetes-master.sh
+++ /dev/null
@@ -1,200 +0,0 @@
-#!/usr/bin/env bash
-#
-# Installs, configures and starts kubernetes master, it will use default values
-# from ./helpers.bash
-# Globals:
-#   INSTALL, if set installs k8s binaries, otherwise it will only configure k8s
-#######################################
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-source "${dir}/helpers.bash"
-
-cache_dir="${dir}/../../../hack/cache"
-
-k8s_cache_dir="${cache_dir}/k8s/${k8s_version}"
-
-log "Installing kubernetes master components..."
-
-certs_dir="${dir}/certs"
-
-set -e
-
-sudo mkdir -p /var/lib/kubernetes
-
-cp "${certs_dir}/ca-k8s.pem" \
-   "${certs_dir}/ca-kubelet.pem" \
-   "${certs_dir}/k8s-controller-manager-key.pem" \
-   "${certs_dir}/k8s-controller-manager.pem" \
-   "${certs_dir}/k8s-scheduler-key.pem" \
-   "${certs_dir}/k8s-scheduler.pem" \
-   "${certs_dir}/ca-etcd.pem" \
-   "${certs_dir}/etcd-k8s-api-server-key.pem" \
-   "${certs_dir}/etcd-k8s-api-server.pem" \
-   "${certs_dir}/k8s-api-server-key.pem" \
-   "${certs_dir}/k8s-api-server.pem" \
-   "${certs_dir}/kubelet-api-server-key.pem" \
-   "${certs_dir}/kubelet-api-server.pem" \
-   "${certs_dir}/k8s-controller-manager-sa.pem" \
-   "${certs_dir}/k8s-controller-manager-sa-key.pem" \
-   /var/lib/kubernetes
-
-# Since k8s 1.11.0-beta.2, kube-apiserver stop receiving the flag `--tls-ca-file`
-# Now we need to append the CA after the certificate
-cat "${certs_dir}/ca-k8s.pem" >> "/var/lib/kubernetes/k8s-api-server.pem"
-
-if [ -n "${INSTALL}" ]; then
-    for component in kubectl kube-apiserver kube-controller-manager kube-scheduler; do
-        download_to "${k8s_cache_dir}" "${component}" \
-            "https://dl.k8s.io/release/${k8s_version}/bin/linux/amd64/${component}"
-
-        cp "${k8s_cache_dir}/${component}" .
-    done
-
-    chmod +x kube-apiserver kube-controller-manager kube-scheduler kubectl
-
-    sudo cp kube-apiserver kube-controller-manager kube-scheduler kubectl /usr/bin/
-fi
-
-sudo tee /etc/systemd/system/kube-apiserver.service <<EOF
-[Unit]
-Description=Kubernetes API Server
-Documentation=https://kubernetes.io/docs/home
-
-[Service]
-ExecStart=/usr/bin/kube-apiserver \\
-  --enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeClaimResize,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota,Priority \\
-  --advertise-address=${controllers_ips[1]} \\
-  --allow-privileged=true \\
-  --authorization-mode=Node,RBAC \\
-  --bind-address=0.0.0.0 \\
-  --cert-dir=/var/run/kubernetes \\
-  --client-ca-file='/var/lib/kubernetes/ca-k8s.pem' \\
-  --etcd-cafile='/var/lib/kubernetes/ca-etcd.pem' \\
-  --etcd-certfile='/var/lib/kubernetes/etcd-k8s-api-server.pem' \\
-  --etcd-keyfile='/var/lib/kubernetes/etcd-k8s-api-server-key.pem' \\
-  --etcd-servers=https://${controllers_ips[0]}:2379 \\
-  --feature-gates=EndpointSliceTerminatingCondition=true \\
-  --kubelet-certificate-authority='/var/lib/kubernetes/ca-kubelet.pem' \\
-  --kubelet-client-certificate='/var/lib/kubernetes/k8s-api-server.pem' \\
-  --kubelet-client-key='/var/lib/kubernetes/k8s-api-server-key.pem' \\
-  --service-account-issuer='api' \\
-  --service-account-signing-key-file='/var/lib/kubernetes/k8s-controller-manager-sa-key.pem' \\
-  --service-account-key-file='/var/lib/kubernetes/k8s-controller-manager-sa-key.pem' \\
-  --service-cluster-ip-range=${k8s_service_cluster_ip_range} \\
-  --service-node-port-range=30000-32767 \\
-  --tls-cert-file='/var/lib/kubernetes/k8s-api-server.pem' \\
-  --tls-private-key-file='/var/lib/kubernetes/k8s-api-server-key.pem' \\
-  --v=2
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-sudo systemctl daemon-reload
-sudo systemctl enable kube-apiserver
-sudo systemctl restart kube-apiserver
-
-sudo systemctl status kube-apiserver --no-pager
-
-kubectl config set-cluster kubernetes \
-    --certificate-authority=/var/lib/kubernetes/ca-k8s.pem \
-    --embed-certs=true \
-    --server=https://${controllers_ips[0]}:6443 \
-    --kubeconfig=controller-manager.kubeconfig
-
-kubectl config set-credentials controller-manager \
-    --client-certificate=/var/lib/kubernetes/k8s-controller-manager.pem \
-    --client-key=/var/lib/kubernetes/k8s-controller-manager-key.pem \
-    --embed-certs=true \
-    --kubeconfig=controller-manager.kubeconfig
-
-kubectl config set-context default \
-    --cluster=kubernetes \
-    --user=controller-manager \
-    --kubeconfig=controller-manager.kubeconfig
-
-kubectl config use-context default \
-    --kubeconfig=controller-manager.kubeconfig
-
-sudo cp ./controller-manager.kubeconfig /var/lib/kubernetes/controller-manager.kubeconfig
-
-sudo tee /etc/systemd/system/kube-controller-manager.service <<EOF
-[Unit]
-Description=Kubernetes Controller Manager
-Documentation=https://kubernetes.io/docs/home
-
-[Service]
-ExecStart=/usr/bin/kube-controller-manager \\
-  --allocate-node-cidrs=true \\
-  --cluster-cidr=${k8s_cluster_cidr} \\
-  --cluster-name=kubernetes \\
-  --configure-cloud-routes=false \\
-  --kubeconfig='/var/lib/kubernetes/controller-manager.kubeconfig' \\
-  --leader-elect=true \\
-  --node-cidr-mask-size-ipv4=${k8s_node_cidr_v4_mask_size} \\
-  --node-cidr-mask-size-ipv6=${k8s_node_cidr_v6_mask_size} \\
-  --use-service-account-credentials \\
-  --service-account-private-key-file='/var/lib/kubernetes/k8s-controller-manager-sa-key.pem' \\
-  --service-cluster-ip-range=${k8s_service_cluster_ip_range} \\
-  --v=2
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-sudo systemctl daemon-reload
-sudo systemctl enable kube-controller-manager
-sudo systemctl restart kube-controller-manager
-
-sudo systemctl status kube-controller-manager --no-pager
-
-kubectl config set-cluster kubernetes \
-    --certificate-authority=/var/lib/kubernetes/ca-k8s.pem \
-    --embed-certs=true \
-    --server=https://${controllers_ips[0]}:6443 \
-    --kubeconfig=scheduler.kubeconfig
-
-kubectl config set-credentials scheduler \
-    --client-certificate=/var/lib/kubernetes/k8s-scheduler.pem \
-    --client-key=/var/lib/kubernetes/k8s-scheduler-key.pem \
-    --embed-certs=true \
-    --kubeconfig=scheduler.kubeconfig
-
-kubectl config set-context default \
-    --cluster=kubernetes \
-    --user=scheduler \
-    --kubeconfig=scheduler.kubeconfig
-
-kubectl config use-context default \
-    --kubeconfig=scheduler.kubeconfig
-
-sudo cp ./scheduler.kubeconfig /var/lib/kubernetes/scheduler.kubeconfig
-
-sudo tee /etc/systemd/system/kube-scheduler.service <<EOF
-[Unit]
-Description=Kubernetes Scheduler
-Documentation=https://kubernetes.io/docs/home
-
-[Service]
-ExecStart=/usr/bin/kube-scheduler \\
-  --kubeconfig='/var/lib/kubernetes/scheduler.kubeconfig' \\
-  --v=2
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-sudo systemctl daemon-reload
-sudo systemctl enable kube-scheduler
-sudo systemctl restart kube-scheduler
-
-sudo systemctl status kube-scheduler --no-pager
-
-log "Installing kubernetes master components... DONE!"
diff --git a/contrib/vagrant/scripts/03-install-kubernetes-worker.sh b/contrib/vagrant/scripts/03-install-kubernetes-worker.sh
deleted file mode 100755
index 2995b4bd7cfdd..0000000000000
--- a/contrib/vagrant/scripts/03-install-kubernetes-worker.sh
+++ /dev/null
@@ -1,375 +0,0 @@
-#!/usr/bin/env bash
-#
-# Installs, configures and starts kubernetes worker, it will use default values
-# from ./helpers.bash
-# Globals:
-#   INSTALL, if set installs k8s binaries, otherwise it will only configure k8s
-#######################################
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-source "${dir}/helpers.bash"
-source "${dir}/cert-gen-helpers.bash"
-
-cache_dir="${dir}/../../../hack/cache"
-k8s_cache_dir="${cache_dir}/k8s/${k8s_version}"
-certs_dir="${dir}/certs"
-
-function install_crio() {
-   curl https://raw.githubusercontent.com/cri-o/packaging/main/get | bash -s -- -t a68a72071e5004be78fe2b1b98cb3bfa0e51b74b
-}
-
-function install_containerd() {
-    download_to "${cache_dir}/containerd" "cri-containerd-cni-1.6.3-linux-amd64.tar.gz" \
-       "https://github.com/containerd/containerd/releases/download/v1.6.3/cri-containerd-cni-1.6.3-linux-amd64.tar.gz"
-
-    cp "${cache_dir}/containerd/cri-containerd-cni-1.6.3-linux-amd64.tar.gz" .
-
-    sudo tar -C / -xzf cri-containerd-cni-1.6.3-linux-amd64.tar.gz
-
-    # Remove the default CNI config installed by containerd.
-    sudo rm -f /etc/cni/net.d/10-containerd-net.conflist
-
-    cat <<EOF > /etc/containerd/config.toml
-root = "/tmp/containers"
-state = "/run/containerd"
-oom_score = 0
-
-[grpc]
-  address = "/run/containerd/containerd.sock"
-  uid = 0
-  gid = 0
-  max_recv_message_size = 16777216
-  max_send_message_size = 16777216
-
-[plugins.cri.containerd]
-  snapshotter = "native"
-
-[debug]
-  address = ""
-  uid = 0
-  gid = 0
-  level = ""
-
-[metrics]
-  address = ""
-  grpc_histogram = false
-EOF
-
-    sudo systemctl enable containerd
-    sudo systemctl restart containerd
-
-    sudo crictl -r unix:///run/containerd/containerd.sock ps
-
-    sudo systemctl restart docker
-    sudo docker ps
-}
-
-# node_ip_addresses returns the parameter for kubelet --node-ip
-# need to cover 3 scenarios:
-# 1. $node_ipv6 == "", this happens when ipv6 is disabled
-# 2. $node_ip == $node_ipv6, this happens when IPV6_EXT=1
-# 3. $node_ip != $node_ipv6 && $node_ipv6 != ""
-# we concatenate two vars on scenario 3 and return the non-empty var for the others
-function node_ip_addresses() {
-    if [[ -z "$node_ipv6" ]]; then
-        echo -n $node_ip
-    elif [[ "$node_ipv6" == "$node_ip" ]]; then
-        echo -n $node_ipv6
-    else
-        echo -n "$node_ip,$node_ipv6"
-    fi
-}
-
-log "Installing kubernetes worker components..."
-
-set -e
-
-sudo mkdir -p /opt/cni/bin
-
-if [ -n "${INSTALL}" ]; then
-    for component in kubectl kubelet kube-proxy; do
-        download_to "${k8s_cache_dir}" "${component}" \
-            "https://dl.k8s.io/release/${k8s_version}/bin/linux/amd64/${component}"
-
-        cp "${k8s_cache_dir}/${component}" .
-    done
-
-    download_to "${cache_dir}/cni" "cni-plugins-amd64-v0.7.5.tgz" \
-        "https://github.com/containernetworking/plugins/releases/download/v0.7.5/cni-plugins-amd64-v0.7.5.tgz"
-
-    cp "${cache_dir}/cni/cni-plugins-amd64-v0.7.5.tgz" .
-
-    sudo tar -xvf cni-plugins-amd64-v0.7.5.tgz -C /opt/cni/bin
-
-    chmod +x kubelet kubectl kube-proxy
-
-    sudo cp kubelet kubectl kube-proxy /usr/bin/
-
-    case "${RUNTIME}" in
-    "crio" | "cri-o")
-        install_crio
-        ;;
-    *)
-        install_containerd
-        ;;
-    esac
-
-fi
-
-case "${RUNTIME}" in
-    "crio" | "cri-o")
-        cat <<EOF > /etc/crictl.yaml
-runtime-endpoint: unix:///var/run/crio/crio.sock
-EOF
-        ;;
-    *)
-        cat <<EOF > /etc/crictl.yaml
-runtime-endpoint: unix:///var/run/containerd/containerd.sock
-EOF
-        ;;
-esac
-
-log "Copying cilium certificates to /var/lib/cilium"
-# Copy cilium certificates to /var/lib/cilium
-sudo mkdir -p /var/lib/cilium
-
-cp "${certs_dir}/ca-k8s.pem" \
-   "${certs_dir}/ca-etcd.pem" \
-   "${certs_dir}/etcd-cilium-key.pem" \
-   "${certs_dir}/etcd-cilium.pem" \
-   "${certs_dir}/k8s-cilium-key.pem" \
-   "${certs_dir}/k8s-cilium.pem" \
-   /var/lib/cilium
-
-log "Copying nginx certificates to /var/lib/nginx"
-# Copy nginx certificates to /var/lib/nginx
-sudo mkdir -p /var/lib/nginx
-
-cp "${certs_dir}/ca-k8s.pem" \
-   "${certs_dir}/k8s-nginx-key.pem" \
-   "${certs_dir}/k8s-nginx.pem" \
-   /var/lib/nginx
-
-log "Generating client kubelet and component certificates"
-
-hostname=$(hostname)
-current_path=$(echo $PWD)
-cd "${certs_dir}"
-generate_kubelet_client_certs k8s system:node:${hostname} k8s-kubelet-${hostname}
-generate_k8s_component_certs kubelet ${hostname} kubelet-kubelet-${hostname}
-generate_k8s_component_certs k8s ${hostname} k8s-kube-proxy-${hostname}
-cd "${current_path}"
-
-log "Copying kubelet certificates to /var/lib/kubelet"
-# Copy kube-proxy certificates to /var/lib/kubelet
-sudo mkdir -p /var/lib/kubelet/
-
-cp "${certs_dir}/ca-k8s.pem" \
-   "${certs_dir}/ca-kubelet.pem" \
-   "${certs_dir}/k8s-kubelet-${hostname}-key.pem" \
-   "${certs_dir}/k8s-kubelet-${hostname}.pem" \
-   "${certs_dir}/kubelet-kubelet-${hostname}.pem" \
-   "${certs_dir}/kubelet-kubelet-${hostname}-key.pem" \
-   /var/lib/kubelet/
-
-log "Copying kube-proxy certificates to /var/lib/kube-proxy"
-# Copy kube-proxy certificates to /var/lib/kube-proxy
-sudo mkdir -p /var/lib/kube-proxy/
-
-cp "${certs_dir}/ca-k8s.pem" \
-   "${certs_dir}/k8s-kube-proxy-${hostname}-key.pem" \
-   "${certs_dir}/k8s-kube-proxy-${hostname}.pem" \
-   /var/lib/kube-proxy/
-
-log "Generating etc-docnfig file for cilium to contact etcd"
-# Generate etcd-config file for cilium to contact etcd
-sudo tee /var/lib/cilium/etcd-config.yml <<EOF
----
-endpoints:
-- https://${controllers_ips[0]}:2379
-trusted-ca-file: '/var/lib/cilium/ca-etcd.pem'
-key-file: '/var/lib/cilium/etcd-cilium-key.pem'
-cert-file: '/var/lib/cilium/etcd-cilium.pem'
-EOF
-
-log "Generating kubeconfig file for cilium"
-# Create dedicated kube-config file for cilium
-kubectl config set-cluster kubernetes \
-    --certificate-authority=/var/lib/cilium/ca-k8s.pem \
-    --embed-certs=true \
-    --server=https://${controllers_ips[0]}:6443 \
-    --kubeconfig=cilium.kubeconfig
-
-kubectl config set-credentials cilium \
-    --client-certificate=/var/lib/cilium/k8s-cilium.pem \
-    --client-key=/var/lib/cilium/k8s-cilium-key.pem \
-    --embed-certs=true \
-    --kubeconfig=cilium.kubeconfig
-
-kubectl config set-context default \
-    --cluster=kubernetes \
-    --user=cilium \
-    --kubeconfig=cilium.kubeconfig
-
-kubectl config use-context default \
-    --kubeconfig=cilium.kubeconfig
-
-sudo cp ./cilium.kubeconfig /var/lib/cilium/cilium.kubeconfig
-
-
-# Create dedicated kube-config file for nginx
-log "creating kubeconfig file for nginx"
-kubectl config set-cluster kubernetes \
-    --certificate-authority=/var/lib/nginx/ca-k8s.pem \
-    --embed-certs=true \
-    --server=https://${controllers_ips[0]}:6443 \
-    --kubeconfig=nginx.kubeconfig
-
-kubectl config set-credentials nginx \
-    --client-certificate=/var/lib/nginx/k8s-nginx.pem \
-    --client-key=/var/lib/nginx/k8s-nginx-key.pem \
-    --embed-certs=true \
-    --kubeconfig=nginx.kubeconfig
-
-kubectl config set-context default \
-    --cluster=kubernetes \
-    --user=nginx \
-    --kubeconfig=nginx.kubeconfig
-
-kubectl config use-context default \
-    --kubeconfig=nginx.kubeconfig
-
-sudo cp ./nginx.kubeconfig /var/lib/nginx/nginx.kubeconfig
-
-
-log "creating kubeconfig file for kubelet"
-# Create dedicated kube-config file for kubelet
-sudo mkdir -p /var/lib/kubelet/
-
-kubectl config set-cluster kubernetes \
-    --certificate-authority=/var/lib/kubelet/ca-k8s.pem \
-    --embed-certs=true \
-    --server=https://${controllers_ips[0]}:6443 \
-    --kubeconfig=kubelet.kubeconfig
-
-kubectl config set-credentials kubelet \
-    --client-certificate=/var/lib/kubelet/k8s-kubelet-${hostname}.pem \
-    --client-key=/var/lib/kubelet/k8s-kubelet-${hostname}-key.pem \
-    --embed-certs=true \
-    --kubeconfig=kubelet.kubeconfig
-
-kubectl config set-context default \
-    --cluster=kubernetes \
-    --user=kubelet \
-    --kubeconfig=kubelet.kubeconfig
-
-kubectl config use-context default \
-    --kubeconfig=kubelet.kubeconfig
-
-sudo cp ./kubelet.kubeconfig /var/lib/kubelet/kubelet.kubeconfig
-
-
-log "creating kubeconfig file for kube-proxy"
-# Create dedicated kube-config file for kube-proxy
-sudo mkdir -p /var/lib/kube-proxy/
-
-kubectl config set-cluster kubernetes \
-    --certificate-authority=/var/lib/kube-proxy/ca-k8s.pem \
-    --embed-certs=true \
-    --server=https://${controllers_ips[0]}:6443 \
-    --kubeconfig=kube-proxy.kubeconfig
-
-kubectl config set-credentials kubelet \
-    --client-certificate=/var/lib/kube-proxy/k8s-kube-proxy-${hostname}.pem \
-    --client-key=/var/lib/kube-proxy/k8s-kube-proxy-${hostname}-key.pem \
-    --embed-certs=true \
-    --kubeconfig=kube-proxy.kubeconfig
-
-kubectl config set-context default \
-    --cluster=kubernetes \
-    --user=kube-proxy \
-    --kubeconfig=kube-proxy.kubeconfig
-
-kubectl config use-context default \
-    --kubeconfig=kube-proxy.kubeconfig
-
-sudo cp ./kube-proxy.kubeconfig /var/lib/kube-proxy/kube-proxy.kubeconfig
-# FIXME remove this once we know how to set up kube-proxy in RBAC properly
-sudo cp ./cilium.kubeconfig /var/lib/kube-proxy/kube-proxy.kubeconfig
-
-log "creating kube-proxy systemd service"
-sudo tee /etc/systemd/system/kube-proxy.service <<EOF
-[Unit]
-Description=Kubernetes Kube-Proxy Server
-Documentation=https://kubernetes.io/docs/concepts/overview/components/#kube-proxy https://kubernetes.io/docs/reference/generated/kube-proxy/
-After=network.target
-
-[Service]
-ExecStart=/usr/bin/kube-proxy \\
-  --cluster-cidr=${k8s_cluster_cidr} \\
-  --kubeconfig=/var/lib/kube-proxy/kube-proxy.kubeconfig \\
-  --proxy-mode=iptables \\
-  --v=2
-
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-log "reloading systemctl daemon and enabling and restarting kube-proxy"
-sudo systemctl daemon-reload
-sudo systemctl enable kube-proxy
-sudo systemctl restart kube-proxy
-
-sudo systemctl status kube-proxy --no-pager
-
-log "creating systemd service for kubelet"
-sudo tee /etc/systemd/system/kubelet.service <<EOF
-[Unit]
-Description=Kubernetes Kubelet
-Documentation=https://kubernetes.io/docs/home
-After=${container_runtime_name}.service
-Requires=${container_runtime_name}.service
-
-[Service]
-# Mount BPF fs for cilium
-ExecStartPre=/bin/bash -c ' \\
-        if [[ \$(/bin/mount | /bin/grep /sys/fs/bpf -c) -eq 0 ]]; then \\
-           /bin/mount bpffs /sys/fs/bpf -t bpf; \\
-        fi'
-ExecStart=/usr/bin/kubelet \\
-  --client-ca-file=/var/lib/kubelet/ca-k8s.pem \\
-  --cloud-provider= \\
-  --cluster-dns=${cluster_dns_ip},${cluster_dns_ipv6} \\
-  --cluster-domain=cluster.local \\
-  --container-runtime=${container_runtime_kubelet} \\
-  ${container_runtime_endpoint} \\
-  ${cgroup_driver} \\
-  --kubeconfig=/var/lib/kubelet/kubelet.kubeconfig \\
-  --fail-swap-on=false \\
-  --make-iptables-util-chains=false \\
-  --node-ip=$(node_ip_addresses) \\
-  --register-node=true \\
-  --serialize-image-pulls=false \\
-  --tls-cert-file=/var/lib/kubelet/kubelet-kubelet-${hostname}.pem \\
-  --tls-private-key-file=/var/lib/kubelet/kubelet-kubelet-${hostname}-key.pem \\
-  --v=2
-
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-log "reloading systemctl daemon and enabling and restarting kubelet"
-sudo systemctl daemon-reload
-sudo systemctl enable kubelet
-sudo systemctl restart kubelet
-
-sudo systemctl status kubelet --no-pager
-
-log "Installing kubernetes worker components... DONE!"
diff --git a/contrib/vagrant/scripts/04-install-kubectl.sh b/contrib/vagrant/scripts/04-install-kubectl.sh
deleted file mode 100755
index c5b3fa3b88957..0000000000000
--- a/contrib/vagrant/scripts/04-install-kubectl.sh
+++ /dev/null
@@ -1,85 +0,0 @@
-#!/usr/bin/env bash
-#
-# Installs and configures kubernetes kubectl, it will use default values from
-# ./helpers.bash
-# Globals:
-#   INSTALL, if set installs k8s binaries, otherwise it will only configure k8s
-#######################################
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-source "${dir}/helpers.bash"
-
-cache_dir="${dir}/../../../hack/cache/k8s/${k8s_version}"
-
-log "Installing kubernetes kubectl..."
-
-set -e
-
-# Add aliases and bash completion for kubectl
-cat <<EOF >> /home/vagrant/.bashrc
-# kubectl
-source <(kubectl completion bash)
-alias k='kubectl'
-complete -F __start_kubectl k
-alias ks='kubectl -n kube-system'
-complete -F __start_kubectl ks
-alias wk='watch -n2 kubectl get pods -o wide'
-alias wks='watch -n2 kubectl -n kube-system get pods -o wide'
-alias wka='watch -n2 kubectl get all --all-namespaces -o wide'
-cilium_pod() {
-    kubectl -n kube-system get pods -l k8s-app=cilium \
-            -o jsonpath="{.items[?(@.spec.nodeName == \"\$1\")].metadata.name}"
-}
-EOF
-
-if [ -n "${INSTALL}" ]; then
-    download_to "${cache_dir}" "kubectl" \
-        "https://dl.k8s.io/release/${k8s_version}/bin/linux/amd64/kubectl"
-
-    cp "${cache_dir}/kubectl" .
-
-    chmod +x kubectl
-    sudo mv kubectl /usr/local/bin
-fi
-
-certs_dir="${dir}/certs"
-
-mkdir -p /home/vagrant/.kube/certs
-
-cp "${certs_dir}/k8s-admin.pem" \
-   "${certs_dir}/k8s-admin-key.pem" \
-   "${certs_dir}/ca-k8s.pem" \
-   /home/vagrant/.kube/certs
-
-kubectl config set-cluster kubernetes-cilium \
-    --certificate-authority=/home/vagrant/.kube/certs/ca-k8s.pem \
-    --embed-certs=true \
-    --server=https://${kubernetes_master}:6443
-
-kubectl config set-credentials admin \
-    --client-certificate=/home/vagrant/.kube/certs/k8s-admin.pem \
-    --client-key=/home/vagrant/.kube/certs/k8s-admin-key.pem \
-    --embed-certs=true
-
-kubectl config set-context kubernetes-cilium \
-    --cluster=kubernetes-cilium \
-    --user=admin
-
-kubectl config use-context kubernetes-cilium
-
-sudo cp /root/.kube/config /home/vagrant/.kube/config
-
-sudo chmod 755 /home/vagrant/.kube/config
-
-sudo chown vagrant.vagrant -R /home/vagrant/.kube
-
-until kubectl get services
-do
-log "Waiting for kubectl to connect to api-server"
-sleep 1s
-done
-
-kubectl get nodes
-
-log "Installing kubernetes kubectl... DONE!"
diff --git a/contrib/vagrant/scripts/05-install-cilium.sh b/contrib/vagrant/scripts/05-install-cilium.sh
deleted file mode 100755
index 7c401ce734230..0000000000000
--- a/contrib/vagrant/scripts/05-install-cilium.sh
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/usr/bin/env bash
-#
-# It checks if a policy is loaded in cilium. It will use default values from
-# ./helpers.bash
-#######################################
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-source "${dir}/helpers.bash"
-
-log "Checking cilium policies..."
-
-set -e
-
-cilium policy get
-
-log "Checking cilium policies... DONE!"
diff --git a/contrib/vagrant/scripts/06-install-coredns.sh b/contrib/vagrant/scripts/06-install-coredns.sh
deleted file mode 100755
index 7d1296938a059..0000000000000
--- a/contrib/vagrant/scripts/06-install-coredns.sh
+++ /dev/null
@@ -1,38 +0,0 @@
-#!/usr/bin/env bash
-#
-# Configures, deletes, and creates kube-dns in the cluster defined in kubectl
-# to configure the spec files. It will use default values from ./helpers.bash
-#######################################
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-source "${dir}/helpers.bash"
-
-log "Installing coredns into kubectl cluster..."
-
-set -e
-
-deployments_dir="${dir}/../deployments"
-cm_file="${deployments_dir}/coredns-cm.yaml"
-svc_file="${deployments_dir}/coredns-svc.yaml"
-controller_file="${deployments_dir}/coredns-controller.yaml"
-sa_file="${deployments_dir}/coredns-sa.yaml"
-
-sed "s/\$DNS_SERVER_IPV6/${cluster_dns_ipv6}/;s/\$DNS_SERVER_IP/${cluster_dns_ip}/" "${svc_file}.sed" > "${svc_file}"
-
-sed -e "s/\$DNS_DOMAIN/cluster.local/" \
-    "${cm_file}.sed" > "${cm_file}"
-
-kubectl delete --grace-period=5 -f "${controller_file}" 2>/dev/null || true
-kubectl delete --grace-period=5 -f "${svc_file}" 2>/dev/null || true
-kubectl delete --grace-period=5 -f "${sa_file}" 2>/dev/null || true
-kubectl delete --grace-period=5 -f "${cm_file}" 2>/dev/null || true
-kubectl create -f "${cm_file}" || true
-kubectl create -f "${sa_file}" || true
-kubectl create -f "${svc_file}" || true
-kubectl create -f "${controller_file}" || true &
-
-kubectl --namespace=kube-system get svc
-kubectl --namespace=kube-system get pods
-
-log "Installing coredns into kubectl cluster... DONE!"
diff --git a/contrib/vagrant/scripts/08-guestbook.sh b/contrib/vagrant/scripts/08-guestbook.sh
deleted file mode 100755
index 1a814ea5922f7..0000000000000
--- a/contrib/vagrant/scripts/08-guestbook.sh
+++ /dev/null
@@ -1,31 +0,0 @@
-#!/usr/bin/env bash
-#
-# Creates guestbook example and waits for it to be ready to use.
-#######################################
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-source "${dir}/helpers.bash"
-
-log "Installing guestbook into kubectl cluster..."
-
-set -e
-
-kubectl create -f "${dir}/../network-policy/" || true
-
-kubectl create -f "${dir}/../deployments/guestbook/"
-
-kubectl get pods -o wide
-
-while [[ "$(kubectl get pods | grep guestbook | grep Running -c)" -ne "1" ]] ; do
-    log "Waiting for guestbook pod to be Running..."
-    sleep 2s
-done
-
-while [[ "$(kubectl get pods --output=jsonpath='{range .items[*]}{.metadata.name} {.status.podIP}{"\n"}{end}' 2>&1 | grep guestbook -c )"  -ne "1" ]] ; do
-    log "Waiting for guestbook pod to have a pod IP assigned..."
-    kubectl get pods --output=jsonpath='{range .items[*]}{.metadata.name} {.status.podIP}{"\n"}{end}'
-    sleep 2s
-done
-
-log "Installing guestbook into kubectl cluster... DONE!"
diff --git a/contrib/vagrant/scripts/cert-gen-helpers.bash b/contrib/vagrant/scripts/cert-gen-helpers.bash
deleted file mode 100644
index e69e4c8bffbea..0000000000000
--- a/contrib/vagrant/scripts/cert-gen-helpers.bash
+++ /dev/null
@@ -1,293 +0,0 @@
-#######################################
-# Generate the certificate authority certificates in the form of ca-name.pem
-# Arguments:
-#   name
-#######################################
-generate_ca_certs(){
-    if [ $# -ne 1 ]; then
-        echo "Invalid arguments: usage generate_ca_certs <name>"
-        exit
-    fi
-    name=${1}
-    cat > ${name}-config.json <<EOF
-{
-  "signing": {
-    "default": {
-      "expiry": "2191h"
-    },
-    "profiles": {
-      "${name}": {
-        "usages": ["signing", "key encipherment", "server auth", "client auth"],
-        "expiry": "2191h"
-      }
-    }
-  }
-}
-EOF
-
-    cat > ca-${name}-csr.json <<EOF
-{
-  "CN": "${name}",
-  "hosts": [
-    "${name}"
-  ],
-  "key": {
-    "algo": "rsa",
-    "size": 2048
-  },
-  "names": [
-    {
-      "C": "US",
-      "L": "San Francisco",
-      "O": "${name}",
-      "OU": "CI",
-      "ST": "California"
-    }
-  ]
-}
-EOF
-
-    cfssl gencert -initca ca-${name}-csr.json | cfssljson -bare ca-${name}
-
-    openssl x509 -in ca-${name}.pem -text -noout
-}
-
-#######################################
-# Generate server certificates in the form of cli-name.pem
-# Arguments:
-#   certificate-authority filename
-#   server/client filename
-#   server/client's hostname
-#######################################
-generate_server_certs() {
-    if [ $# -ne 3 ]; then
-        echo "Invalid arguments: usage generate_client_certs <ca-name> <cli-name> <hostname>"
-        exit
-    fi
-    ca_name=${1}
-    cli_name=${2}
-    master_hostname=${3}
-    cat > ${cli_name}-csr.json <<EOF
-{
-  "CN": "${cli_name}",
-  "hosts": [
-    "${cli_name}",
-    "${master_hostname}",
-    "${master_ip}",
-    "${cluster_api_server_ipv4}",
-    "${cluster_api_server_ipv6}",
-    "${cli_name}.cluster.default"
-  ],
-  "key": {
-    "algo": "rsa",
-    "size": 2048
-  },
-  "names": [
-    {
-      "C": "US",
-      "L": "San Francisco",
-      "O": "${ca_name}",
-      "OU": "CI",
-      "ST": "California"
-    }
-  ]
-}
-EOF
-
-    cfssl gencert \
-      -ca=ca-${ca_name}.pem \
-      -ca-key=ca-${ca_name}-key.pem \
-      -config=${ca_name}-config.json \
-      -profile=${ca_name} \
-      ${cli_name}-csr.json | cfssljson -bare ${cli_name}
-
-    openssl x509 -in ${cli_name}.pem -text -noout
-}
-
-#######################################
-# Generate kubelet client certificates in the form of "filename.pem"
-# Arguments:
-#   certificate-authority filename
-#   client name
-#   filename
-#######################################
-generate_kubelet_client_certs() {
-    if [ $# -ne 3 ]; then
-        echo "Invalid arguments: usage generate_client_certs <ca-name> <cli-name> <filename>"
-        exit
-    fi
-    ca_name=${1}
-    cli_name=${2}
-    filename=${3}
-    cat > ${filename}-csr.json <<EOF
-{
-  "CN": "${cli_name}",
-  "hosts": [
-     "${cli_name}"
-  ],
-  "key": {
-    "algo": "rsa",
-    "size": 2048
-  },
-  "names": [
-    {
-      "C": "US",
-      "L": "San Francisco",
-      "O": "system:nodes",
-      "OU": "CI",
-      "ST": "California"
-    }
-  ]
-}
-EOF
-
-    cfssl gencert \
-      -ca=ca-${ca_name}.pem \
-      -ca-key=ca-${ca_name}-key.pem \
-      -config=${ca_name}-config.json \
-      -profile=${ca_name} \
-      ${filename}-csr.json | cfssljson -bare ${filename}
-
-    openssl x509 -in ${filename}.pem -text -noout
-}
-
-#######################################
-# Generate k8s component certificates in the form of "filename.pem"
-# Arguments:
-#   certificate-authority filename
-#   k8s component name
-#   filename
-#######################################
-generate_k8s_component_certs() {
-    if [ $# -ne 3 ]; then
-        echo "Invalid arguments: usage generate_k8s_component_certs <ca-name> <k8s-component-name> <filename>"
-        exit
-    fi
-    ca_name=${1}
-    k8s_name=${2}
-    cm_name=${3}
-    cat > ${cm_name}-csr.json <<EOF
-{
-  "CN": "${k8s_name}",
-  "hosts": [
-     "${k8s_name}"
-  ],
-  "key": {
-    "algo": "rsa",
-    "size": 2048
-  },
-  "names": [
-    {
-      "C": "US",
-      "L": "San Francisco",
-      "O": "${k8s_name}",
-      "OU": "CI",
-      "ST": "California"
-    }
-  ]
-}
-EOF
-
-    cfssl gencert \
-      -ca=ca-${ca_name}.pem \
-      -ca-key=ca-${ca_name}-key.pem \
-      -config=${ca_name}-config.json \
-      -profile=${ca_name} \
-      ${cm_name}-csr.json | cfssljson -bare ${cm_name}
-
-    openssl x509 -in ${cm_name}.pem -text -noout
-}
-
-#######################################
-# Generates kubectl admin certificates in the form of "filename.pem"
-# Arguments:
-#   certificate-authority filename
-#   username used in kubectl
-#   filename
-#######################################
-generate_kubectl_admin_certs() {
-    if [ $# -ne 3 ]; then
-        echo "Invalid arguments: usage generate_kubectl_admin_certs <ca-name> <username> <filename>"
-        exit
-    fi
-    ca_name=${1}
-    username=${2}
-    filename=${3}
-    cat > ${filename}-csr.json <<EOF
-{
-  "CN": "${username}",
-  "hosts": [
-     "${username}"
-  ],
-  "key": {
-    "algo": "rsa",
-    "size": 2048
-  },
-  "names": [
-    {
-      "C": "US",
-      "L": "San Francisco",
-      "O": "system:masters",
-      "OU": "CI",
-      "ST": "California"
-    }
-  ]
-}
-EOF
-
-    cfssl gencert \
-      -ca=ca-${ca_name}.pem \
-      -ca-key=ca-${ca_name}-key.pem \
-      -config=${ca_name}-config.json \
-      -profile=${ca_name} \
-      ${filename}-csr.json | cfssljson -bare ${filename}
-
-    openssl x509 -in ${filename}.pem -text -noout
-}
-
-#######################################
-# Generates etcd client certificates in the form of "filename.pem"
-# Arguments:
-#   certificate-authority filename
-#   client name used in etcd
-#   filename
-#######################################
-generate_etcd_client_certs() {
-    if [ $# -ne 3 ]; then
-        echo "Invalid arguments: usage generate_etcd_client_certs <ca-name> <client-name> <filename>"
-        exit
-    fi
-    ca_name=${1}
-    client_name=${2}
-    filename=${3}
-    cat > ${filename}-csr.json <<EOF
-{
-  "CN": "${client_name}",
-  "hosts": [
-    "${client_name}"
-  ],
-  "key": {
-    "algo": "rsa",
-    "size": 2048
-  },
-  "names": [
-    {
-      "C": "US",
-      "L": "San Francisco",
-      "O": "kubernetes",
-      "OU": "CI",
-      "ST": "California"
-    }
-  ]
-}
-EOF
-
-    cfssl gencert \
-      -ca=ca-${ca_name}.pem \
-      -ca-key=ca-${ca_name}-key.pem \
-      -config=${ca_name}-config.json \
-      -profile=${ca_name} \
-      ${filename}-csr.json | cfssljson -bare ${filename}
-
-    openssl x509 -in ${filename}.pem -text -noout
-}
diff --git a/contrib/vagrant/scripts/helpers.bash b/contrib/vagrant/scripts/helpers.bash
deleted file mode 100644
index ed355c35b3cda..0000000000000
--- a/contrib/vagrant/scripts/helpers.bash
+++ /dev/null
@@ -1,124 +0,0 @@
-#!/usr/bin/env bash
-#
-# Installs, configures and starts etcd, it will use default values from
-# ./helpers.bash
-# Globals:
-#   IPV6_EXT, if set, users IPv6 addresses binaries, otherwise it will use IPv4
-#   MASTER_IPV6_PUBLIC, the reachable IPv6 address of kube-apiserver, to be used
-#       with IPV6_EXT=1
-#   MASTER_IPV4, the reachable IPv4 address of kube-apiserver
-#   K8S_CLUSTER_CIDR the cluster cidr to be used in kube-controller-manager
-#       cluster-cidr option
-#   K8S_NODE_CIDR_MASK_SIZE the node cidr to be used in kube-controller-manager
-#       node-cidr-mask-size-ipv4 option
-#   K8S_NODE_CIDR_V6_MASK_SIZE the node cidr to be used in kube-controller-manager
-#       node-cidr-mask-size-ipv6 option
-#   K8S_SERVICE_CLUSTER_IP_RANGE the service cluster IP range to be used in
-#       kube-controller-manager service-cluster-ip-range option
-#   K8S_CLUSTER_DNS_IP the kubedns service IP to be set up in kube-dns service
-#       spec file
-#   K8S_CLUSTER_API_SERVER_IP the cluster api service IP to be set up in the
-#       certificates generated
-#   K8S_CLUSTER_API_SERVER_IPV6 the cluster api service IPv6 to be set up in the
-#       certificates generated
-#   WGET, if set https_proxy, it will set https_proxy for the command's wget,
-#       otherwise alias for wget
-#######################################
-
-if [[ -n "${IPV6_EXT}" ]]; then
-    master_ip=${MASTER_IPV6_PUBLIC:-"FD00::0B"}
-    # controllers_ips[0] contains the IP with brackets, to be used with Port in IPv6
-    # controllers_ips[1] contains the IP without brackets
-    controllers_ips=( "[${master_ip}]" "${master_ip}" )
-else
-    master_ip=${MASTER_IPV4:-"192.168.60.11"}
-    controllers_ips=( "${master_ip}" "${master_ip}" )
-fi
-
-# container runtime options
-case "${RUNTIME}" in
-    "crio" | "cri-o")
-        container_runtime_name="crio"
-        container_runtime_kubelet="remote"
-        container_runtime_endpoint="--container-runtime-endpoint=/var/run/crio/crio.sock"
-        cgroup_driver='--cgroup-driver=systemd'
-        ;;
-    *)
-        container_runtime_name="containerd"
-        container_runtime_kubelet="remote"
-        container_runtime_endpoint="--container-runtime-endpoint=unix:///var/run/containerd/containerd.sock"
-        cgroup_driver='--cgroup-driver=/system.slice/containerd.service'
-        ;;
-esac
-
-kubernetes_master="${controllers_ips[0]}"
-
-# Default values for IPv4 and IPv6
-#
-# CIDR Range for Pods in cluster.
-k8s_cluster_cidr=${K8S_CLUSTER_CIDR:-"10.11.0.0/20,FD04::/96"} # 10.11.0.1-10.11.15.255
-# Mask size for node cidr in cluster.
-k8s_node_cidr_v4_mask_size=${K8S_NODE_CIDR_MASK_SIZE:-"24"} # 1st Node: 10.11.0.1-10.11.0.255, 2nd Node: 10.11.1.1-10.11.1.255..
-k8s_node_cidr_v6_mask_size=${K8S_NODE_CIDR_V6_MASK_SIZE:-"112"} # 1st Node: 10.11.0.1-10.11.0.255, 2nd Node: 10.11.1.1-10.11.1.255...
-# CIDR Range for Services in cluster.
-k8s_service_cluster_ip_range=${K8S_SERVICE_CLUSTER_IP_RANGE:-"172.20.0.0/24,FD03::/112"}
-cluster_dns_ip=${K8S_CLUSTER_DNS_IP:-"172.20.0.10"}
-cluster_dns_ipv6=${K8S_CLUSTER_DNS_IPV6:-"FD03::A"}
-cluster_api_server_ipv4=${K8S_CLUSTER_API_SERVER_IPV4:-"172.20.0.1"}
-cluster_api_server_ipv6=${K8S_CLUSTER_API_SERVER_IPV6:-"FD03::1"}
-
-k8s_version="v1.30.0"
-etcd_version="v3.5.9"
-
-function restore_flag {
-  check_num_params "$#" "2"
-  local save=$1
-  local flag=$2
-  if [[ $save =~ $2 ]]; then
-    set -$2
-  fi
-}
-
-function check_num_params {
-  local NUM_PARAMS=$1
-  local NUM_EXPECTED_PARAMS=$2
-  if [ "$NUM_PARAMS" -ne "$NUM_EXPECTED_PARAMS" ]; then
-    echo "${FUNCNAME[ 1 ]}: invalid number of parameters, expected $NUM_EXPECTED_PARAMS parameter(s)"
-    exit 1
-  fi
-}
-
-function download_to {
-    local cache_dir="${1}"
-    local component="${2}"
-    local url="${3}"
-
-    mkdir -p "${cache_dir}"
-    if [ ! -f "${cache_dir}/${component}" ]; then
-        log "Downloading ${component}..."
-
-        rm -f "/tmp/${component}"
-        ${WGET} -O "/tmp/${component}" -nv "${url}"
-        # Hide 'failed to preserve ownership' error
-        mv "/tmp/${component}" "${cache_dir}/${component}" 2>/dev/null
-
-        log "Downloading ${component}... Done!"
-    fi
-}
-
-function log {
-  local save=$-
-  set +u
-  check_num_params "$#" "1"
-  message=$1
-  local stack
-  for (( i=${#FUNCNAME[@]}-1 ; i>0 ; i-- )) ; do
-    if [[ "${stack}" == "" ]]; then
-      stack="$(basename $0): ${FUNCNAME[i]}"
-    else
-      stack="$stack/${FUNCNAME[i]}"
-    fi
-  done
-  echo "----- ${stack}: $message"
-  restore_flag $save "u"
-}
diff --git a/contrib/vagrant/start.sh b/contrib/vagrant/start.sh
deleted file mode 100755
index ce7692f112bf7..0000000000000
--- a/contrib/vagrant/start.sh
+++ /dev/null
@@ -1,664 +0,0 @@
-#!/usr/bin/env bash
-
-dir=$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )
-
-restart_env=$(env | grep -f $dir/restart-vars | tr '\n' ' ')
-echo "$restart_env $0 $@" > "$dir/restart.sh"
-chmod a+x "$dir/restart.sh"
-
-# Master's IPv4 address. Workers' IPv4 address will have their IP incremented by
-# 1. The netmask used will be /24
-export 'MASTER_IPV4'=${MASTER_IPV4:-"192.168.60.11"}
-# This /24 node CIDR is available from the host (for eg. NFS):
-export 'MASTER_IPV4_NFS'=${MASTER_IPV4_NFS:-"192.168.61.11"}
-# Enable IPv4 mode. It's enabled by default since it's required for several
-# runtime tests.
-export 'IPV4'=${IPV4:-1}
-# Exposed IPv6 node CIDR, only set if IPV4 is disabled. Each node will be setup
-# with a IPv6 network available from the host with $IPV6_PUBLIC_CIDR +
-# 6to4($MASTER_IPV4). For IPv4 "192.168.60.11" we will have for example:
-#   master  : FD00::B/16
-#   worker 1: FD00::C/16
-# The netmask used will be /16
-export 'IPV6_PUBLIC_CIDR'=${IPV4+"FD00::"}
-# Internal IPv6 node CIDR, always set up by default. Each node will be setup
-# with a IPv6 network available from the host with IPV6_INTERNAL_CIDR +
-# 6to4($MASTER_IPV4). For IPv4 "192.168.60.11" we will have for example:
-#   master  : FD01::B/16
-#   worker 1: FD01::C/16
-# The netmask used will be /16
-export 'IPV6_INTERNAL_CIDR'=${IPV4+"FD01::"}
-# Cilium IPv6 node CIDR. Each node will be setup with IPv6 network of
-# $CILIUM_IPV6_NODE_CIDR + 6to4($MASTER_IPV4). For IPv4 "192.168.60.11" we will
-# have for example:
-#   master  : FD02::0:0:0/96
-#   worker 1: FD02::1:0:0/96
-export 'CILIUM_IPV6_NODE_CIDR'=${CILIUM_IPV6_NODE_CIDR:-"FD02::"}
-# VM memory
-export 'VM_MEMORY'=${VM_MEMORY:-4096}
-# Number of CPUs
-export 'VM_CPUS'=${VM_CPUS:-2}
-# VM_BASENAME tag is only set if K8S option is active
-export 'VM_BASENAME'="runtime"
-export 'VM_BASENAME'=${K8S+"k8s"}
-# Sets the default cilium TUNNEL_MODE to "vxlan"
-export 'TUNNEL_MODE_STRING'=${TUNNEL_MODE_STRING:-"-t vxlan"}
-# Replies Yes to all prompts asked in this script
-export 'YES_TO_ALL'=${YES_TO_ALL:-"0"}
-
-# Don't build the tree inside the VMs (faster)
-# Example use as: make -j$(nproc) && NO_BUILD=1 ./contrib/vagrant/start.sh
-export 'NO_BUILD'=${NO_BUILD:-"0"}
-
-# Internal variables used in the Vagrantfile
-export 'CILIUM_SCRIPT'=true
-# Sets the directory where the temporary setup scripts are created
-export 'CILIUM_TEMP'="${dir}"
-
-# Sets VM's Command wget with HTTPS_PROXY
-export 'VM_PROXY'="${VM_SET_PROXY}"
-
-# Sets the RELOAD env variable with 1 if there is any VM printed by
-# vagrant status.
-function set_reload_if_vm_exists(){
-    if [ -z "${RELOAD}" ]; then
-        if [[ $(vagrant status 2>/dev/null | wc -l) -gt 1 && \
-                ! $(vagrant status 2>/dev/null | grep "not created") ]]; then
-            RELOAD=1
-        fi
-    fi
-}
-
-# split_ipv4 splits an IPv4 address into a bash array and assigns it to ${1}.
-# Exits if ${2} is an invalid IPv4 address.
-function split_ipv4(){
-    IFS='.' read -r -a ipv4_array <<< "${2}"
-    eval "${1}=( ${ipv4_array[@]} )"
-    if [[ "${#ipv4_array[@]}" -ne 4 ]]; then
-        echo "Invalid IPv4 address: ${2}"
-        exit 1
-    fi
-}
-
-# get_cilium_node_addr sets the cilium node address in ${1} for the IPv4 address
-# in ${2}.
-function get_cilium_node_addr(){
-    split_ipv4 ipv4_array "${2}"
-    hexIPv4=$(printf "%02X%02X:%02X%02X" "${ipv4_array[0]}" "${ipv4_array[1]}" "${ipv4_array[2]}" "${ipv4_array[3]}")
-    eval "${1}=${CILIUM_IPV6_NODE_CIDR}${hexIPv4}:0:0"
-}
-
-# write_netcfg_header creates the file in ${3} and writes the internal network
-# configuration for the vm IP ${1}. Sets the master's hostname with IPv6 address
-# in ${2}.
-function write_netcfg_header(){
-    vm_ipv6="${1}"
-    master_ipv6="${2}"
-    filename="${3}"
-    cat <<EOF > "${filename}"
-#!/usr/bin/env bash
-set -o errexit
-set -o nounset
-set -o pipefail
-
-K8S=${K8S:-}
-if [ -n "${K8S}" ]; then
-    export K8S="1"
-fi
-
-# Use of IPv6 'documentation block' to provide example
-ip -6 a a ${vm_ipv6}/16 dev enp0s8
-
-echo '${master_ipv6} ${VM_BASENAME}1' >> /etc/hosts
-sysctl -w net.ipv6.conf.all.forwarding=1
-EOF
-}
-
-# write_master_route writes the cilium IPv4 and IPv6 routes for master in ${6}.
-# Uses the IPv4 suffix in ${1} for the IPv4 route and cilium IPv6 in ${2} via
-# ${3} for the IPv6 route. Sets the worker's hostname based on the index defined
-# in ${4} with the IPv6 defined in ${5}.
-function write_master_route(){
-    master_ipv4_suffix="${1}"
-    master_cilium_ipv6="${2}"
-    master_ipv6="${3}"
-    node_index="${4}"
-    worker_ipv6="${5}"
-    filename="${6}"
-    if [ -z "${K8S}" ]; then
-        cat <<EOF >> "${filename}"
-# Master route
-ip r a 10.${master_ipv4_suffix}.0.1/32 dev enp0s8
-ip r a 10.${master_ipv4_suffix}.0.0/16 via 10.${master_ipv4_suffix}.0.1
-EOF
-    fi
-
-    cat <<EOF >> "${filename}"
-echo "${worker_ipv6} ${VM_BASENAME}${node_index}" >> /etc/hosts
-
-EOF
-}
-
-# write_nodes_routes writes in file ${3} the routes for all nodes in the
-# clusters except for node with index ${1}. All routes will be based on IPv4
-# defined in ${2}.
-function write_nodes_routes(){
-    node_index="${1}"
-    base_ipv4_addr="${2}"
-    filename="${3}"
-    cat <<EOF >> "${filename}"
-# Node's routes
-EOF
-    split_ipv4 ipv4_array "${base_ipv4_addr}"
-    local i
-    local index=1
-    for i in `seq $(( ipv4_array[3] + 1 )) $(( ipv4_array[3] + NWORKERS ))`; do
-        index=$(( index + 1 ))
-        hexIPv4=$(printf "%02X%02X:%02X%02X" "${ipv4_array[0]}" "${ipv4_array[1]}" "${ipv4_array[2]}" "${i}")
-        if [ "${node_index}" -eq "${index}" ]; then
-            continue
-        fi
-        worker_internal_ipv6=${IPV6_INTERNAL_CIDR}$(printf "%02X" "${i}")
-        if [ -z "${K8S}" ]; then
-            cat <<EOF >> "${filename}"
-ip r a 10.${i}.0.0/16 via 10.${i}.0.1
-ip r a 10.${i}.0.1/32 dev enp0s8
-EOF
-        fi
-
-        cat <<EOF >> "${filename}"
-echo "${worker_internal_ipv6} ${VM_BASENAME}${index}" >> /etc/hosts
-EOF
-    done
-
-    cat <<EOF >> "${filename}"
-
-EOF
-}
-
-# write_k8s_header create the file in ${2} and writes the k8s configuration.
-# Sets up the k8s temporary directory inside the VM with ${1}.
-function write_k8s_header(){
-    k8s_dir="${1}"
-    filename="${2}"
-    cat <<EOF > "${filename}"
-#!/usr/bin/env bash
-set -o errexit
-set -o nounset
-set -o pipefail
-
-# K8s installation
-sudo apt-get -y install curl
-mkdir -p "${k8s_dir}"
-cd "${k8s_dir}"
-
-EOF
-}
-
-# write_k8s_install writes the k8s installation first half in ${2} and the
-# second half in ${3}. Changes the k8s temporary directory inside the VM,
-# defined in ${1}, owner and group to vagrant.
-function write_k8s_install() {
-    k8s_dir="${1}"
-    filename="${2}"
-    filename_2nd_half="${3}"
-    k8s_cluster_cidr=${k8s_cluster_cidr:-"10.11.0.0/20,FD04::/96"}
-    k8s_node_cidr_mask_size=${k8s_node_cidr_mask_size:-"24"}
-    k8s_node_cidr_v6_mask_size=${k8s_node_cidr_v6_mask_size:-"112"}
-    k8s_service_cluster_ip_range=${k8s_service_cluster_ip_range:-"172.20.0.0/24,FD03::/112"}
-    k8s_cluster_api_server_ip=${k8s_cluster_api_server_ip:-"172.20.0.1"}
-    k8s_cluster_api_server_ipv6=${k8s_cluster_api_server_ipv6:-"FD03::1"}
-    k8s_cluster_dns_ip=${k8s_cluster_dns_ip:-"172.20.0.10"}
-    k8s_cluster_dns_ipv6=${k8s_cluster_dns_ipv6:-"FD03::A"}
-
-    cat <<EOF >> "${filename}"
-# K8s
-k8s_path="/home/vagrant/go/src/github.com/cilium/cilium/contrib/vagrant/scripts"
-export IPV6_EXT="${IPV6_EXT}"
-export K8S_CLUSTER_CIDR="${k8s_cluster_cidr}"
-export K8S_NODE_CIDR_MASK_SIZE="${k8s_node_cidr_mask_size}"
-export K8S_NODE_CIDR_V6_MASK_SIZE="${k8s_node_cidr_v6_mask_size}"
-export K8S_SERVICE_CLUSTER_IP_RANGE="${k8s_service_cluster_ip_range}"
-export K8S_CLUSTER_API_SERVER_IP="${k8s_cluster_api_server_ip}"
-export K8S_CLUSTER_API_SERVER_IPV6="${k8s_cluster_api_server_ipv6}"
-export K8S_CLUSTER_DNS_IP="${k8s_cluster_dns_ip}"
-export K8S_CLUSTER_DNS_IPV6="${k8s_cluster_dns_ipv6}"
-export RUNTIME="${RUNTIME}"
-export INSTALL="${INSTALL}"
-# Always do installation if RELOAD is not set
-if [ -z "${RELOAD}" ]; then
-    export INSTALL="1"
-fi
-
-if [ -n "${VM_PROXY}" ]; then
-    export WGET="HTTPS_PROXY=${VM_PROXY} wget"
-else
-    export WGET="wget"
-fi
-export ETCD_CLEAN="${ETCD_CLEAN}"
-
-# Stop cilium before until we install kubelet. This prevents cilium from
-# allocating its own podCIDR without using the kubernetes allocated podCIDR.
-sudo service cilium stop
-EOF
-    cat <<EOF >> "${filename}"
-if [[ "\$(hostname)" == "${VM_BASENAME}1" ]]; then
-    echo "\$(hostname)"
-    "\${k8s_path}/00-create-certs.sh"
-    "\${k8s_path}/01-install-etcd.sh"
-    "\${k8s_path}/02-install-kubernetes-master.sh"
-fi
-# All nodes are a kubernetes worker
-"\${k8s_path}/03-install-kubernetes-worker.sh"
-"\${k8s_path}/04-install-kubectl.sh"
-chown vagrant.vagrant -R "${k8s_dir}"
-
-EOF
-
-    cat <<EOF > "${filename_2nd_half}"
-#!/usr/bin/env bash
-set -o errexit
-set -o nounset
-set -o pipefail
-
-# K8s installation 2nd half
-k8s_path="/home/vagrant/go/src/github.com/cilium/cilium/contrib/vagrant/scripts"
-export IPV6_EXT="${IPV6_EXT}"
-export K8S_CLUSTER_CIDR="${k8s_cluster_cidr}"
-export K8S_NODE_CIDR_MASK_SIZE="${k8s_node_cidr_mask_size}"
-export K8S_NODE_CIDR_V6_MASK_SIZE="${k8s_node_cidr_v6_mask_size}"
-export K8S_SERVICE_CLUSTER_IP_RANGE="${k8s_service_cluster_ip_range}"
-export K8S_CLUSTER_API_SERVER_IP="${k8s_cluster_api_server_ip}"
-export K8S_CLUSTER_API_SERVER_IPV6="${k8s_cluster_api_server_ipv6}"
-export K8S_CLUSTER_DNS_IP="${k8s_cluster_dns_ip}"
-export K8S_CLUSTER_DNS_IPV6="${k8s_cluster_dns_ipv6}"
-export RUNTIME="${RUNTIME}"
-export K8STAG="${VM_BASENAME}"
-export NWORKERS="${NWORKERS}"
-export INSTALL="${INSTALL}"
-# Always do installation if RELOAD is not set
-if [ -z "${RELOAD}" ]; then
-    export INSTALL="1"
-fi
-
-if [ -n "${VM_PROXY}" ]; then
-    export WGET="HTTPS_PROXY=${VM_PROXY} wget"
-else
-    export WGET="wget"
-fi
-export ETCD_CLEAN="${ETCD_CLEAN}"
-
-cd "${k8s_dir}"
-"\${k8s_path}/05-install-cilium.sh"
-if [[ "\$(hostname)" == "${VM_BASENAME}1" ]]; then
-    "\${k8s_path}/06-install-coredns.sh"
-else
-    "\${k8s_path}/04-install-kubectl.sh"
-fi
-EOF
-}
-
-function write_cilium_cfg() {
-    node_index="${1}"
-    master_ipv4_suffix="${2}"
-    ipv6_addr="${3}"
-    filename="${4}"
-
-    cilium_options="\
-      --debug --pprof --enable-hubble --hubble-listen-address :4244 --enable-k8s-event-handover \
-      --k8s-require-ipv4-pod-cidr --enable-bandwidth-manager --kube-proxy-replacement=disabled"
-    cilium_operator_options=" --debug"
-
-    if [[ "${IPV4}" -eq "1" ]]; then
-        if [[ -z "${K8S}" ]]; then
-            cilium_options+=" --ipv4-range 10.${master_ipv4_suffix}.0.0/16"
-        fi
-    else
-        cilium_options+=" --enable-ipv4=false"
-    fi
-
-    cilium_options+=" --enable-ipv6-ndp"
-    cilium_options+=" --ipv6-mcast-device enp0s8"
-
-    cilium_options+=" ${TUNNEL_MODE_STRING}"
-
-    if [ -n "${K8S}" ]; then
-        cilium_kvstore_options="--kvstore etcd --kvstore-opt etcd.config=/var/lib/cilium/etcd-config.yml"
-        cilium_options+=" --k8s-kubeconfig-path /var/lib/cilium/cilium.kubeconfig"
-        cilium_options_with_kvstore="${cilium_options} ${cilium_kvstore_options}"
-        cilium_options+=" --identity-allocation-mode=crd --enable-k8s-event-handover=false"
-        cilium_operator_options+=" --k8s-kubeconfig-path /var/lib/cilium/cilium.kubeconfig"
-        cilium_operator_options+=" --cluster-pool-ipv4-cidr=10.${master_ipv4_suffix}.0.0/20"
-        cilium_operator_options+=" --cluster-pool-ipv6-cidr=fd04::/96"
-        cilium_operator_options_with_kvstore="${cilium_operator_options} ${cilium_kvstore_options}"
-        cilium_operator_options+=" --identity-allocation-mode=crd"
-    else
-        if [[ "${IPV4}" -eq "1" ]]; then
-            cilium_options+=" --kvstore-opt etcd.address=${MASTER_IPV4}:4001"
-            cilium_operator_options+=" --kvstore-opt etcd.address=${MASTER_IPV4}:4001"
-        else
-            cilium_options+=" --kvstore-opt etcd.address=[${ipv6_addr}]:4001"
-            cilium_operator_options+=" --kvstore-opt etcd.address=[${ipv6_addr}]:4001"
-        fi
-        cilium_options+=" --kvstore etcd"
-        cilium_operator_options+=" --kvstore etcd"
-    fi
-
-cat <<EOF >> "$filename"
-sleep 2s
-if [ -n "\${K8S}" ]; then
-
-    # It is expected and wanted to have CILIUM_OPTS and
-    # CILIUM_OPERATOR_OPTS defined two times, for with and without
-    # kvstore. Developers can switch between them and restart services.
-
-    echo "K8S_NODE_NAME=\$(hostname)" >> /etc/sysconfig/cilium
-    echo '# Cilium configuration with kvstore.' >> /etc/sysconfig/cilium
-    echo 'CILIUM_OPTS="${cilium_options_with_kvstore}"' >> /etc/sysconfig/cilium
-    echo 'CILIUM_OPERATOR_OPTS="${cilium_operator_options_with_kvstore}"' >> /etc/sysconfig/cilium
-    echo '' >> /etc/sysconfig/cilium
-    echo '# Cilium configuration without kvstore.' >> /etc/sysconfig/cilium
-fi
-echo 'CILIUM_OPTS="${cilium_options}"' >> /etc/sysconfig/cilium
-echo 'CILIUM_OPERATOR_OPTS="${cilium_operator_options}"' >> /etc/sysconfig/cilium
-echo 'PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin' >> /etc/sysconfig/cilium
-chmod 644 /etc/sysconfig/cilium
-
-# Wait for the node to have a podCIDR so that cilium can use the podCIDR
-# allocated by k8s
-if [ -n "\${K8S}" ]; then
-    for ((i = 0 ; i < 24; i++)); do
-        if kubectl get nodes -o json | grep -i podCIDR > /dev/null 2>&1; then
-            podCIDR=true
-            break
-        fi
-        sleep 5s
-        echo "Waiting for kubernetes node \$(hostname) to have a podCIDR"
-    done
-fi
-
-systemctl daemon-reload
-service cilium restart
-/home/vagrant/go/src/github.com/cilium/cilium/test/provision/wait-cilium.sh
-EOF
-}
-
-function create_master(){
-    split_ipv4 ipv4_array "${MASTER_IPV4}"
-    get_cilium_node_addr master_cilium_ipv6 "${MASTER_IPV4}"
-    output_file="${dir}/node-1.sh"
-    write_netcfg_header "${MASTER_IPV6}" "${MASTER_IPV6}" "${output_file}"
-
-    if [ -n "${NWORKERS}" ]; then
-        write_nodes_routes 1 "${MASTER_IPV4}" "${output_file}"
-    fi
-
-    echo "service cilium-operator restart" >> ${output_file}
-    write_cilium_cfg 1 "${ipv4_array[3]}" "${master_cilium_ipv6}" "${output_file}"
-}
-
-function create_workers(){
-    split_ipv4 ipv4_array "${MASTER_IPV4}"
-    master_prefix_ip="${ipv4_array[3]}"
-    get_cilium_node_addr master_cilium_ipv6 "${MASTER_IPV4}"
-    base_workers_ip=$(printf "%d.%d.%d." "${ipv4_array[0]}" "${ipv4_array[1]}" "${ipv4_array[2]}")
-    if [ -n "${NWORKERS}" ]; then
-        for i in `seq 2 $(( NWORKERS + 1 ))`; do
-            output_file="${dir}/node-${i}.sh"
-            worker_ip_suffix=$(( ipv4_array[3] + i - 1 ))
-            worker_ipv6=${IPV6_INTERNAL_CIDR}$(printf '%02X' ${worker_ip_suffix})
-            worker_host_ipv6=${IPV6_PUBLIC_CIDR}$(printf '%02X' ${worker_ip_suffix})
-            ipv6_public_workers_addrs+=(${worker_host_ipv6})
-
-            write_netcfg_header "${worker_ipv6}" "${MASTER_IPV6}" "${output_file}"
-
-            write_master_route "${master_prefix_ip}" "${master_cilium_ipv6}" \
-                "${MASTER_IPV6}" "${i}" "${worker_ipv6}" "${output_file}"
-            write_nodes_routes "${i}" ${MASTER_IPV4} "${output_file}"
-
-            worker_cilium_ipv4="${base_workers_ip}${worker_ip_suffix}"
-            get_cilium_node_addr worker_cilium_ipv6 "${worker_cilium_ipv4}"
-            write_cilium_cfg "${i}" "${worker_ip_suffix}" "${worker_cilium_ipv6}" "${output_file}"
-        done
-    fi
-}
-
-# create_k8s_config creates k8s config
-function create_k8s_config(){
-    if [ -n "${K8S}" ]; then
-        k8s_temp_dir="/home/vagrant/k8s"
-        output_file="${dir}/cilium-k8s-install-1st-part.sh"
-        output_2nd_file="${dir}/cilium-k8s-install-2nd-part.sh"
-        write_k8s_header "${k8s_temp_dir}" "${output_file}"
-        write_k8s_install "${k8s_temp_dir}" "${output_file}" "${output_2nd_file}"
-    fi
-}
-
-# set_vagrant_env sets up Vagrantfile environment variables
-function set_vagrant_env(){
-    split_ipv4 ipv4_array "${MASTER_IPV4}"
-    export 'IPV4_BASE_ADDR'="$(printf "%d.%d.%d." "${ipv4_array[0]}" "${ipv4_array[1]}" "${ipv4_array[2]}")"
-    export 'FIRST_IP_SUFFIX'="${ipv4_array[3]}"
-    export 'MASTER_IPV6_PUBLIC'="${IPV6_PUBLIC_CIDR}$(printf '%02X' ${ipv4_array[3]})"
-
-    split_ipv4 ipv4_array_nfs "${MASTER_IPV4_NFS}"
-    export 'IPV4_BASE_ADDR_NFS'="$(printf "%d.%d.%d." "${ipv4_array_nfs[0]}" "${ipv4_array_nfs[1]}" "${ipv4_array_nfs[2]}")"
-    export 'FIRST_IP_SUFFIX_NFS'="${ipv4_array[3]}"
-    echo "# NFS enabled. don't forget to enable these ports on your host"
-    echo "# before starting the VMs in order to have nfs working"
-    echo "# iptables -I INPUT -s ${IPV4_BASE_ADDR_NFS}0/24 -j ACCEPT"
-
-    echo "# To use kubectl on the host, you need to add the following route:"
-    echo "# ip route add $MASTER_IPV4 via $MASTER_IPV4_NFS"
-
-    temp=$(printf " %s" "${ipv6_public_workers_addrs[@]}")
-    export 'IPV6_PUBLIC_WORKERS_ADDRS'="${temp:1}"
-    if [[ "${IPV4}" -ne "1" ]]; then
-        export 'IPV6_EXT'=1
-    fi
-}
-
-# vboxnet_create_new_interface creates a new host only network interface with
-# VBoxManage utility. Returns the created interface name in ${1}.
-function vboxnet_create_new_interface(){
-    output=$(VBoxManage hostonlyif create)
-    vboxnet_interface=$(echo "${output}" | grep -oE "'[a-zA-Z0-9]+'" | sed "s/'//g")
-    if [ -z "${vboxnet_interface}" ]; then
-        echo "Unable create VBox hostonly interface:"
-        echo "${output}"
-        return
-    fi
-    eval "${1}=${vboxnet_interface}"
-}
-
-# vboxnet_add_ipv6 adds the IPv6 in ${2} with the netmask length in ${3} in the
-# hostonly network interface set in ${1}.
-function vboxnet_add_ipv6(){
-    vboxnetif="${1}"
-    ipv6="${2}"
-    ipv6_mask="${3}"
-    VBoxManage hostonlyif ipconfig "${vboxnetif}" \
-        --ipv6 "${ipv6}" --netmasklengthv6 "${ipv6_mask}"
-}
-
-# vboxnet_add_ipv4 adds the IPv4 in ${2} with the netmask in ${3} in the
-# hostonly network interface set in ${1}.
-function vboxnet_add_ipv4(){
-    vboxnetif="${1}"
-    ipv4="${2}"
-    ipv4_mask="${3}"
-    VBoxManage hostonlyif ipconfig "${vboxnetif}" \
-        --ip "${ipv4}" --netmask "${ipv4_mask}"
-}
-
-# vboxnet_addr_finder checks if any vboxnet interface has the IPv6 public CIDR
-function vboxnet_addr_finder(){
-    all_vbox_interfaces=$(VBoxManage list hostonlyifs | grep -E "^Name|IPV6Address|IPV6NetworkMaskPrefixLength" | awk -F" " '{print $2}')
-    # all_vbox_interfaces format example:
-    # vboxnet0
-    # fd00:0000:0000:0000:0000:0000:0000:0001
-    # 64
-    # vboxnet1
-    # fd05:0000:0000:0000:0000:0000:0000:0001
-    # 16
-    if [[ -n "${RELOAD}" ]]; then
-        all_ifaces=$(echo "${all_vbox_interfaces}" | awk 'NR % 3 == 1')
-        if [[ -n "${all_ifaces}" ]]; then
-            while read -r iface; do
-                iface_addresses=$(ip addr show "$iface" | grep inet6 | sed 's/.*inet6 \([a-fA-F0-9:/]\+\).*/\1/g')
-                # iface_addresses format example:
-                # fd00::1/64
-                # fe80::800:27ff:fe00:2/64
-                if [[ -z "${iface_addresses}" ]]; then
-                    # No inet6 addresses
-                    continue
-                fi
-                while read -r ip; do
-                    if [ ! -z $(echo "${ip}" | grep -i "${IPV6_PUBLIC_CIDR/::/:}") ]; then
-                        found="1"
-                        net_mask=$(echo "${ip}" | sed 's/.*\///')
-                        vboxnetname="${iface}"
-                        break
-                    fi
-                done <<< "${iface_addresses}"
-                if [[ -n "${found}" ]]; then
-                    break
-                fi
-            done <<< "${all_ifaces}"
-        fi
-    fi
-    if [[ -z "${found}" ]]; then
-        all_ipv6=$(echo "${all_vbox_interfaces}" | awk 'NR % 3 == 2')
-        line_ip=0
-        if [[ -n "${all_vbox_interfaces}" ]]; then
-            while read -r ip; do
-                line_ip=$(( $line_ip + 1 ))
-                if [ ! -z $(echo "${ip}" | grep -i "${IPV6_PUBLIC_CIDR/::/:}") ]; then
-                    found=${line_ip}
-                    net_mask=$(echo "${all_vbox_interfaces}" | awk "NR == 3 * ${line_ip}")
-                    vboxnetname=$(echo "${all_vbox_interfaces}" | awk "NR == 3 * ${line_ip} - 2")
-                    break
-                fi
-            done <<< "${all_ipv6}"
-        fi
-    fi
-
-    if [[ -z "${found}" ]]; then
-        echo "WARN: VirtualBox interface with \"${IPV6_PUBLIC_CIDR}\" not found"
-        if [ ${YES_TO_ALL} -eq "0" ]; then
-            read -r -p "Create a new VBox hostonly network interface? [y/N] " response
-        else
-            response="Y"
-        fi
-        case "${response}" in
-            [yY])
-                echo "Creating VBox hostonly network..."
-            ;;
-            *)
-                exit
-            ;;
-        esac
-        vboxnet_create_new_interface vboxnetname
-        if [ -z "${vboxnet_interface}" ]; then
-            exit 1
-        fi
-    elif [[ "${net_mask}" -ne 64 ]]; then
-        echo "WARN: VirtualBox interface with \"${IPV6_PUBLIC_CIDR}\" found in ${vboxnetname}"
-        echo "but set wrong network mask (${net_mask} instead of 64)"
-        if [ ${YES_TO_ALL} -eq "0" ]; then
-            read -r -p "Change network mask of '${vboxnetname}' to 64? [y/N] " response
-        else
-            response="Y"
-        fi
-        case "${response}" in
-            [yY])
-                echo "Changing network mask to 64..."
-            ;;
-            *)
-                exit
-            ;;
-        esac
-    fi
-    split_ipv4 ipv4_array_nfs "${MASTER_IPV4_NFS}"
-    IPV4_BASE_ADDR_NFS="$(printf "%d.%d.%d.1" "${ipv4_array_nfs[0]}" "${ipv4_array_nfs[1]}" "${ipv4_array_nfs[2]}")"
-    vboxnet_add_ipv6 "${vboxnetname}" "${IPV6_PUBLIC_CIDR}1" 64
-    vboxnet_add_ipv4 "${vboxnetname}" "${IPV4_BASE_ADDR_NFS}" "255.255.255.0"
-}
-
-
-function createVm(){
-    vboxnet_addr_finder
-
-    ipv6_public_workers_addrs=()
-
-    split_ipv4 ipv4_array "${MASTER_IPV4}"
-    MASTER_IPV6="${IPV6_INTERNAL_CIDR}$(printf '%02X' ${ipv4_array[3]})"
-
-    set_reload_if_vm_exists
-
-    create_master
-    create_workers
-    set_vagrant_env
-    create_k8s_config
-
-    cd "${dir}/../.."
-
-    PROVISION_ARGS=""
-    if [ -n "${NO_PROVISION}" ]; then
-        PROVISION_ARGS="--no-provision"
-    fi
-    if [ -n "${RELOAD}" ]; then
-        vagrant reload $PROVISION_ARGS $1
-    elif [ -n "${PROVISION}" ]; then
-        vagrant provision $1
-    else
-        vagrant up $PROVISION_ARGS $1
-        if [ "$?" -eq "0" -a -n "${K8S}" ]; then
-            hostname=k8s1
-            if [ ! -z "$NETNEXT" -a "$NETNEXT" = "true" -o "$NETNEXT" = "1" ]; then
-                hostname=k8s1+
-            fi
-            host_port=$(vagrant port --guest 6443 $hostname)
-            vagrant ssh $hostname -- cat /home/vagrant/.kube/config | sed "s;server:.*:6443;server: https://k8s1:$host_port;g" > vagrant.kubeconfig
-            echo "Add '127.0.0.1 k8s1' to your /etc/hosts to use vagrant.kubeconfig file for kubectl"
-        fi
-    fi
-}
-
-# Check if there are already running VMs.
-runningVm=$(VBoxManage list runningvms | awk 'END{ print NR }')
-VMName=$(VBoxManage list runningvms | awk 'NR==1{print $1}' |  cut -d "\"" -f 2)
-if [ "$VMName" ]; then
-    echo "Detected running VMs that might cause conflict:"
-    VBoxManage list runningvms
-
-    echo
-    printf "Do you wish to stop, destroy the VM(s) or ignore and continue? [s/d/C] "
-    read optn
-
-    case "$optn" in
-        "s" )
-            # Stop all VMs
-            for ((i=1; i<=$runningVm; i=i+1))
-            do
-                VMName=$(VBoxManage list runningvms | awk 'NR==1{print $1}' |  cut -d "\"" -f 2)
-                VBoxManage controlvm $VMName poweroff
-                printf "$VMName stopped\n"
-            done
-            printf "\n$runningVm VM(s) successfully stopped\n"
-        ;;
-        "d" )
-            # Destroy all VMs
-            for ((i=1; i<=$runningVm; i=i+1))
-            do
-                VMName=$(VBoxManage list runningvms | awk 'NR==1{print $1}' |  cut -d "\"" -f 2)
-                VBoxManage controlvm $VMName poweroff
-                VBoxManage unregistervm $VMName --delete
-                printf "$VMName destroyed\n"
-            done
-            printf "\n$runningVm VM(s) successfully destroyed\n"
-        ;;
-    esac
-    echo
-fi
-createVm $1
diff --git a/test/Makefile b/test/Makefile
index 0ead8523d1453..0e6d1fc0dd41c 100644
--- a/test/Makefile
+++ b/test/Makefile
@@ -75,6 +75,5 @@ k8s-kind:
 clean:
 	@$(ECHO_CLEAN)
 	-$(QUIET) rm -rf $(TEST_ARTIFACTS)
-	-$(QUIET) rm -f .vagrant/*.box
 	-$(QUIET)$(MAKE) -C bpf/ clean
 
diff --git a/test/Vagrantfile b/test/Vagrantfile
deleted file mode 100644
index 787b2a48236a4..0000000000000
--- a/test/Vagrantfile
+++ /dev/null
@@ -1,276 +0,0 @@
-# -*- mode: ruby -*-
-# vi: set ft=ruby Vagrant.require_version ">= 2.2.0"
-
-# The source of truth for vagrant box versions.
-# Sets SERVER_BOX, SERVER_VERSION, NETNEXT_SERVER_BOXET and NEXT_SERVER_VERSION
-# Accepts overrides from env variables
-require_relative '../vagrant_box_defaults.rb'
-$SERVER_BOX = (ENV['SERVER_BOX'] || $SERVER_BOX)
-$SERVER_VERSION= (ENV['SERVER_VERSION'] || $SERVER_VERSION)
-$NETNEXT_SERVER_BOX = (ENV['NETNEXT_SERVER_BOX'] || $NETNEXT_SERVER_BOX)
-$NETNEXT_SERVER_VERSION= (ENV['NETNEXT_SERVER_VERSION'] || $NETNEXT_SERVER_VERSION)
-
-$BUILD_NUMBER = ENV['BUILD_NUMBER'] || "0"
-$JOB_NAME = ENV['JOB_BASE_NAME'] || "LOCAL"
-$K8S_VERSION = ENV['K8S_VERSION'] || "1.30"
-$K8S_NODES = (ENV['K8S_NODES'] || "2").to_i
-$NFS = ENV['NFS']=="0"? false : true
-$NFS_OPTS = (ENV['NFS_OPTS'] || "nolock").split(",")
-$IPv6=(ENV['IPv6'] || "0")
-$CONTAINER_RUNTIME=(ENV['CONTAINER_RUNTIME'] || "docker")
-$CNI_INTEGRATION=(ENV['CNI_INTEGRATION'] || "")
-$CILIUM_IMAGE = ENV['CILIUM_IMAGE'] || ""
-$CILIUM_TAG = ENV['CILIUM_TAG'] || ""
-$CILIUM_OPERATOR_IMAGE = ENV['CILIUM_OPERATOR_IMAGE'] || ""
-$CILIUM_OPERATOR_TAG = ENV['CILIUM_OPERATOR_TAG'] || ""
-$HUBBLE_RELAY_IMAGE = ENV['HUBBLE_RELAY_IMAGE'] || ""
-$HUBBLE_RELAY_TAG = ENV['HUBBLE_RELAY_TAG'] || ""
-$PRELOAD_VM = ENV['PRELOAD_VM'] || "false"
-$PROVISION_EXTERNAL_WORKLOAD = ENV['PROVISION_EXTERNAL_WORKLOAD'] || "false"
-$SKIP_K8S_PROVISION = ENV['SKIP_K8S_PROVISION'] || "false"
-$NO_CILIUM_ON_NODES = ENV['NO_CILIUM_ON_NODES'] || ENV['NO_CILIUM_ON_NODE'] || ""
-$KUBEPROXY = (ENV['KUBEPROXY'] || "1")
-$RACE = ENV['RACE'] || ""
-$LOCKDEBUG = ENV['LOCKDEBUG'] || ""
-$BASE_IMAGE = ENV['BASE_IMAGE'] || ""
-$DOCKER_LOGIN = ENV['DOCKER_LOGIN'] || ""
-$DOCKER_PASSWORD = ENV['DOCKER_PASSWORD'] || ""
-$CILIUM_REGISTRY = ENV['CILIUM_REGISTRY'] || ""
-
-# RAM and CPU settings
-$MEMORY = (ENV['VM_MEMORY'] || "4096").to_i
-$CPU = (ENV['VM_CPUS'] || "2").to_i
-
-if ENV['NETNEXT'] == "true" || ENV['NETNEXT'] == "1" || ENV['KERNEL'] == "net-next" then
-    $SERVER_BOX = $NETNEXT_SERVER_BOX
-    $SERVER_VERSION = $NETNEXT_SERVER_VERSION
-elsif ENV['KERNEL'] != nil && ENV['KERNEL'] != "" then
-    $SERVER_BOX = instance_variable_get("@v"+ ENV['KERNEL'] + "_SERVER_BOX")
-    $SERVER_VERSION = instance_variable_get("@v"+ ENV['KERNEL'] + "_SERVER_VERSION")
-end
-
-# Workaround issue as described here:
-# https://github.com/cilium/cilium/pull/12520
-class VagrantPlugins::ProviderVirtualBox::Action::Network
-  def dhcp_server_matches_config?(dhcp_server, config)
-    true
-  end
-end
-
-$cleanup = <<SCRIPT
-i=1
-k8s_nodes="${K8S_NODES:-2}"
-while [ "$i" -le "$k8s_nodes" ]; do
-    VBoxManage natnetwork add --netname natnet$i --network 192.168.0.0/16 --ipv6 on --enable
-    i=$((i+1))
-done
-
-res=0
-while [ "$res" == "0" ]; do
-    VBoxManage natnetwork remove --netname natnet$i
-    res=$?
-    i=$((i+1))
-done
-
-VBoxManage natnetwork list
-SCRIPT
-
-$bootstrap = <<SCRIPT
-set -o errexit
-set -o nounset
-set -o pipefail
-
-# Add an exception for the cilium repo for the root user to fix the
-# "fatal: unsafe repository ('/home/vagrant/go/src/github.com/cilium/cilium' is owned by someone else)"
-# error condition when running `sudo make install`
-git config --global --add safe.directory /home/vagrant/go/src/github.com/cilium/cilium
-
-if [ -x /home/vagrant/go/src/github.com/cilium/cilium/.devvmrc ] ; then
-   echo "----------------------------------------------------------------"
-   echo "Executing .devvmrc"
-   /home/vagrant/go/src/github.com/cilium/cilium/.devvmrc || true
-fi
-echo "----------------------------------------------------------------"
-sudo sed -i 's/^mesg n$/tty -s \\&\\& mesg n/g' /root/.profile
-echo 'export GOPATH=$(go env GOPATH)' >> /home/vagrant/.bashrc
-SCRIPT
-
-Vagrant.configure("2") do |config|
-    cilium_dir = '../'
-    cilium_path = '/home/vagrant/go/src/github.com/cilium/cilium'
-    if ENV["SHARE_PARENT"] == "2" then
-        cilium_dir = '../../..'
-        cilium_path = '/home/vagrant/go/src/github.com'
-    elsif ENV["SHARE_PARENT"] then
-        cilium_dir = '../..'
-        cilium_path = '/home/vagrant/go/src/github.com/cilium'
-    end
-
-    config.trigger.before :up, :provision do |trigger|
-        trigger.run = {inline: "bash -c '#{$cleanup}'"}
-    end
-
-    config.vm.define "runtime" do |server|
-        server.vm.provider "virtualbox" do |vb|
-            vb.customize ["modifyvm", :id, "--hwvirtex", "on"]
-            vb.cpus = $CPU
-            vb.memory= $MEMORY
-            vb.linked_clone = true
-            vb.default_nic_type = "virtio"
-            # Prevent VirtualBox from interfering with host audio stack
-            vb.customize ["modifyvm", :id, "--audio", "none"]
-            # Enable HPET, the Go scheduler heavily relies on accurate timers.
-            vb.customize ["modifyvm", :id, "--hpet", "on"]
-        end
-
-        server.vm.box =  "#{$SERVER_BOX}"
-        server.vm.box_version = $SERVER_VERSION
-        server.vm.boot_timeout = 600
-        server.vm.hostname = "runtime"
-
-        server.vm.network "private_network",
-            ip: "192.168.56.10",
-            virtualbox__intnet: "cilium-k8s#{$BUILD_NUMBER}-#{$JOB_NAME}-#{$K8S_VERSION}"
-        server.vm.network "private_network",
-            ip: "192.168.57.10",
-            virtualbox__intnet: "cilium-k8s-2#{$BUILD_NUMBER}-#{$JOB_NAME}-#{$K8S_VERSION}"
-
-        # @TODO: Clean this one when https://github.com/hashicorp/vagrant/issues/9822 is fixed.
-        server.vm.provision "ipv6-config-primary",
-            type: "shell",
-            run: "always",
-            inline: "ip -6 a a fd04::1/96 dev enp0s8 || true"
-        server.vm.provision "ipv6-config-secondary",
-            type: "shell",
-            run: "always",
-            inline: "ip -6 a a fd05::1/96 dev enp0s9 || true"
-
-        # This network is only used by NFS
-        if $NFS
-            # This network is only used by NFS
-            server.vm.network "private_network", ip: "192.168.58.10"
-            server.vm.synced_folder cilium_dir, cilium_path, type: "nfs", nfs_udp: false, mount_options: $NFS_OPTS
-        else
-            server.vm.synced_folder cilium_dir, cilium_path
-        end
-
-        # Provision section
-        server.vm.provision "bootstrap", type: "shell", inline: $bootstrap
-        server.vm.provision "file", source: "provision/", destination: "/tmp/"
-        server.vm.provision "shell" do |sh|
-            sh.path = "./provision/runtime_install.sh"
-            sh.env = {
-              "RACE" => "#{$RACE}",
-              "LOCKDEBUG" => "#{$LOCKDEBUG}",
-              "BASE_IMAGE" => "#{$BASE_IMAGE}",
-              "PROVISION_EXTERNAL_WORKLOAD" => "#{$PROVISION_EXTERNAL_WORKLOAD}",
-              "CILIUM_IMAGE" => "#{$CILIUM_IMAGE}"
-            }
-        end
-    end
-
-    (1..$K8S_NODES).each do |i|
-        config.vm.define "k8s#{i}-#{$K8S_VERSION}" do |server|
-            server.vm.provider "virtualbox" do |vb|
-                vb.customize ["modifyvm", :id, "--hwvirtex", "on"]
-                vb.cpus = $CPU
-                vb.memory = $MEMORY
-                no_cilium_nodes = $NO_CILIUM_ON_NODES.split(',')
-                if no_cilium_nodes.include? "k8s#{i}"
-                  vb.memory = $MEMORY / 2
-                  vb.cpus = 1
-                end
-                vb.linked_clone = true
-                vb.default_nic_type = "virtio"
-                # Prevent VirtualBox from interfering with host audio stack
-                vb.customize ["modifyvm", :id, "--audio", "none"]
-                # Enable HPET, the Go scheduler heavily relies on accurate timers.
-                vb.customize ["modifyvm", :id, "--hpet", "on"]
-
-                if ENV['PRELOAD_VM'] == "false" then
-                  # Use serial ports if the VM is no longer accessible via SSH
-                  vb.customize ["modifyvm", :id, "--uart1", "0x3F8", "4"]
-                  vb.customize ["modifyvm", :id, "--uartmode1", "server", "k8s#{i}-#{$K8S_VERSION}-ttyS0.sock"]
-                end
-            end
-
-            server.vm.box =  "#{$SERVER_BOX}"
-            server.vm.box_version = $SERVER_VERSION
-            server.vm.hostname = "k8s#{i}"
-            server.vm.boot_timeout = 600
-            if i == 1 then
-                # grafana
-                server.vm.network "forwarded_port", guest: 3000, host: 3000,
-                  auto_correct: true
-                server.vm.network "forwarded_port", guest: 6443, host: 9443,
-                  auto_correct: true
-            end
-            server.vm.network "private_network",
-                ip: "192.168.56.1#{i}",
-                virtualbox__intnet: "cilium-k8s#{$BUILD_NUMBER}-#{$JOB_NAME}-#{$K8S_VERSION}"
-            server.vm.network "private_network",
-                ip: "192.168.57.1#{i}",
-                virtualbox__intnet: "cilium-k8s-2#{$BUILD_NUMBER}-#{$JOB_NAME}-#{$K8S_VERSION}"
-
-            # @TODO: Clean this one when https://github.com/hashicorp/vagrant/issues/9822 is fixed.
-            server.vm.provision "ipv6-config-primary",
-                type: "shell",
-                run: "always",
-                inline: "ip -6 a a fd04::1#{i}/96 dev enp0s8 || true"
-            server.vm.provision "ipv6-config-secondary",
-                type: "shell",
-                run: "always",
-                inline: "ip -6 a a fd05::1#{i}/96 dev enp0s9 || true"
-
-            if $NFS
-                # This network is only used by NFS
-                server.vm.network "private_network", ip: "192.168.58.1#{i}"
-                server.vm.synced_folder cilium_dir, cilium_path, type: "nfs", nfs_udp: false, mount_options: $NFS_OPTS
-            else
-                server.vm.synced_folder cilium_dir, cilium_path
-            end
-
-            # Interface for the IPv6 NAT Service. The IP address doesn't matter
-            # as it won't be used. We use an IPv4 address as newer versions of
-            # VBox reject all IPv6 addresses.
-            server.vm.network "private_network",
-                ip: "192.168.59.15"
-            server.vm.provider "virtualbox" do |vb|
-                vb.customize ["modifyvm", :id, "--nic5", "natnetwork"]
-                vb.customize ["modifyvm", :id, "--nat-network5", "natnet#{i}"]
-            end
-            server.vm.provision "ipv6-nat-config",
-                type: "shell",
-                run: "always",
-                inline: "ip -6 r a default via fd17:625c:f037:2::1 dev enp0s16 || true"
-
-            # Provision section
-            server.vm.provision "bootstrap", type: "shell", inline: $bootstrap
-            server.vm.provision :shell,
-                :inline => "sudo sysctl -w net.ipv6.conf.all.forwarding=1"
-            server.vm.provision "file", source: "provision/", destination: "/tmp/"
-            server.vm.provision "shell" do |sh|
-                sh.path = "./provision/k8s_install.sh"
-                sh.args = [
-                    "k8s#{i}", "192.168.56.1#{i}", "#{$K8S_VERSION}",
-                    "#{$IPv6}", "#{$CONTAINER_RUNTIME}", "#{$CNI_INTEGRATION}"]
-                sh.env = {"CILIUM_IMAGE" => "#{$CILIUM_IMAGE}",
-                          "CILIUM_TAG" => "#{$CILIUM_TAG}",
-                          "CILIUM_OPERATOR_IMAGE" => "#{$CILIUM_OPERATOR_IMAGE}",
-                          "CILIUM_OPERATOR_TAG" => "#{$CILIUM_OPERATOR_TAG}",
-                          "HUBBLE_RELAY_IMAGE" => "#{$HUBBLE_RELAY_IMAGE}",
-                          "HUBBLE_RELAY_TAG" => "#{$HUBBLE_RELAY_TAG}",
-                          "PRELOAD_VM" => "#{$PRELOAD_VM}",
-                          "SKIP_K8S_PROVISION" => "#{$SKIP_K8S_PROVISION}",
-                          "KUBEPROXY" => "#{$KUBEPROXY}",
-                          "RACE" => "#{$RACE}",
-                          "LOCKDEBUG" => "#{$LOCKDEBUG}",
-                          "BASE_IMAGE" => "#{$BASE_IMAGE}",
-                          "DOCKER_LOGIN" => "#{$DOCKER_LOGIN}",
-                          "DOCKER_PASSWORD" => "#{$DOCKER_PASSWORD}",
-                          "CILIUM_REGISTRY" => "#{$CILIUM_REGISTRY}"
-                }
-            end
-        end
-    end
-end
diff --git a/test/get-gh-comment-info.py b/test/get-gh-comment-info.py
deleted file mode 100644
index d827002893e0e..0000000000000
--- a/test/get-gh-comment-info.py
+++ /dev/null
@@ -1,17 +0,0 @@
-import argparse
-
-parser = argparse.ArgumentParser()
-parser.add_argument('ghcomment', type=str) # used for `/test` trigger phrases
-parser.add_argument('--focus', type=str, default="")
-parser.add_argument('--kernel_version', type=str, default="")
-parser.add_argument('--k8s_version', type=str, default="")
-parser.add_argument('--retrieve', type=str, default="focus")
-
-args = parser.parse_args()
-
-# Update kernel_version to expected format
-args.kernel_version = args.kernel_version.replace('.', '')
-if args.kernel_version == "netnext":
-	args.kernel_version = "net-next"
-
-print(args.__dict__[args.retrieve])
diff --git a/test/get-vagrant-kubeconfig.sh b/test/get-vagrant-kubeconfig.sh
deleted file mode 100755
index b773231d4e21e..0000000000000
--- a/test/get-vagrant-kubeconfig.sh
+++ /dev/null
@@ -1,7 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-config=$(vagrant ssh k8s1-${K8S_VERSION} -- sudo cat /etc/kubernetes/admin.conf)
-port=$(cat .vagrant/machines/k8s1-${K8S_VERSION}/virtualbox/id | xargs vboxmanage showvminfo --machinereadable | grep 'Forwarding.*6443' | awk -F ',' '{print $4}')
-echo "$config" | sed "s/6443/$port/g"
diff --git a/test/packet/.gitignore b/test/packet/.gitignore
deleted file mode 100644
index d15ea1c21ee78..0000000000000
--- a/test/packet/.gitignore
+++ /dev/null
@@ -1,4 +0,0 @@
-.terraform.*
-.terraform/
-terraform.tfstate
-terraform.tfstate.backup
diff --git a/test/packet/README.md b/test/packet/README.md
deleted file mode 100644
index cb75d1945a70b..0000000000000
--- a/test/packet/README.md
+++ /dev/null
@@ -1,31 +0,0 @@
-# Instructions to run CI tests in your own packet-net instances
-
-1) Download terraform https://www.terraform.io/downloads.html
-2) Get your API key by clicking in your user profile (top right corner) and
-pick "API Keys" https://app.packet.net/login
-3) Create an API Key with read/write permissions and give a description,
-something like "CI private testing"
-4) Store the private token as you will need it in the next steps
-5) Go to the packet.net and pick or create a project ID
-6) Generate your own SSH keys via `ssk-keygen`
-7) Set the following env vars:
-```
-export TF_VAR_public_key_path="<SSH PUB KEY PATH>"
-export TF_VAR_private_key_path="<SSH PRIV KEY PATH>"
-export TF_VAR_metal_token="<TOKEN>"
-export TF_VAR_metal_project_id="<PROJECT ID>"
-# For europeans it's better to pick Amsterdam (ams1) or Toronto (yyz1)
-export TF_VAR_metal_location="ams1"
-export TF_VAR_metal_plan="c1.small.x86"
-```
-8) `terraform init`
-9) `terraform apply`
-10) After the VM is up and running you can check its IP with `terraform show`
-11) SSH in to the public IP with `ssh -i <ssh-key-path> root@<publicIP>`
-12) Checkout to the branch that you want to test `git checkout <my-faulty-branch>`
-13) Run `screen` which will create a new terminal, this is helpful as you can leave your terminal while tests are running and come back again afterwards.
-14) Enter the `test` directory with `cd test`
-15) Run the ginkgo command to initialize the tests, for example:
-`INTEGRATION_TESTS=true K8S_VERSION=1.14 ginkgo --focus="K8s" -v -- --cilium.showCommands --cilium.holdEnvironment=true`
-16) Once tests are running and if you are running `screen`, you can leave the terminal
-by typing `CTRL+a+d`, to resume again type `screen -r`
diff --git a/test/packet/main.tf b/test/packet/main.tf
deleted file mode 100644
index 2e485fff6fbde..0000000000000
--- a/test/packet/main.tf
+++ /dev/null
@@ -1,69 +0,0 @@
-terraform {
-  required_providers {
-    metal = {
-      source = "equinix/metal"
-    }
-  }
-}
-
-variable "public_key_path" {}
-variable "private_key_path" {}
-
-variable "metal_token" {}
-variable "metal_project_id" {}
-variable "metal_plan" {}
-
-variable "metal_location" {
-    default="sjc1"
-}
-
-variable "nodes" {
-    default =  1
-}
-
-provider "metal" {
-    auth_token = var.metal_token
-}
-
-resource "metal_ssh_key" "key1" {
-    name       = "key1"
-    public_key = file(var.public_key_path)
-}
-
-# Create a device and add it to tf_project_1
-resource "metal_device" "test" {
-    count            = var.nodes
-    hostname         = "test-${count.index}"
-    plan             = var.metal_plan
-    facilities       = [ var.metal_location ]
-    operating_system = "ubuntu_20_04"
-    billing_cycle    = "hourly"
-    project_id       = var.metal_project_id
-    depends_on       = [ metal_ssh_key.key1 ]
-
-    connection {
-        type = "ssh"
-        host = metal_device.test[count.index].access_public_ipv4
-        user = "root"
-        private_key = file(var.private_key_path)
-        agent = false
-    }
-
-    provisioner "file" {
-        source="scripts"
-        destination="/provision"
-    }
-
-    provisioner "file" {
-            source="../../contrib/scripts/add_vagrant_box.sh"
-            destination="/provision"
-    }
-
-    provisioner "remote-exec" {
-        inline = [
-            "sudo chmod 755 /provision/*.sh",
-            "sudo /provision/install.sh",
-            "go get -u github.com/cilium/cilium || true"
-        ]
-    }
-}
diff --git a/test/packet/scripts/install.sh b/test/packet/scripts/install.sh
deleted file mode 100644
index e39896feb643e..0000000000000
--- a/test/packet/scripts/install.sh
+++ /dev/null
@@ -1,72 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-# Ensure no prompts from apt & co.
-export DEBIAN_FRONTEND=noninteractive
-
-# renovate: datasource=golang-version depName=go
-GOLANG_VERSION="1.22.4"
-VAGRANT_VERSION="2.2.16"
-PACKER_VERSION="1.3.5"
-
-#repositories
-
-echo "deb http://download.virtualbox.org/virtualbox/debian bionic contrib" > /etc/apt/sources.list.d/virtualbox.list
-
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
-sudo apt-key fingerprint 0EBFCD88
-wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox_2016.asc -O- | sudo apt-key add -
-wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -
-sudo add-apt-repository \
-   "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
-   $(lsb_release -cs) \
-   stable"
-
-sudo --preserve-env=DEBIAN_FRONTEND apt-get update
-sudo --preserve-env=DEBIAN_FRONTEND apt-get install -y \
-    curl jq apt-transport-https htop bmon zip \
-    nfs-common nfs-kernel-server \
-    linux-tools-common linux-tools-generic \
-    ca-certificates software-properties-common \
-    git openjdk-8-jdk gcc make perl unzip awscli \
-    linux-headers-`uname -r` virtualbox docker-ce
-
-cd /tmp/
-wget https://releases.hashicorp.com/vagrant/${VAGRANT_VERSION}/vagrant_${VAGRANT_VERSION}_x86_64.deb
-dpkg -i vagrant_*.deb
-
-# this block will attempt to preload required vagrant boxes from the vagrant cache server
-# (it's configuration is in vagrant-cache directory in root of this repo).
-# vagrant cache server is a separate packet box which vagrant-cache.ci.cilium.io points to
-cp /provision/add_vagrant_box.sh /usr/local/bin/
-chmod 755 /usr/local/bin/add_vagrant_box.sh
-
-curl -s https://raw.githubusercontent.com/cilium/cilium/main/vagrant_box_defaults.rb > defaults.rb
-/usr/local/bin/add_vagrant_box.sh defaults.rb
-
-wget https://releases.hashicorp.com/packer/${PACKER_VERSION}/packer_${PACKER_VERSION}_linux_amd64.zip
-unzip packer_${PACKER_VERSION}_linux_amd64.zip
-mv packer /usr/local/bin/
-
-# Kernel parameters
-export CPU=$(($(nproc)-1))
-for i in $(seq 0 $CPU);
-do
-   echo performance > /sys/devices/system/cpu/cpu$i/cpufreq/scaling_governor
-done
-
-#Install Golang
-cd /tmp/
-sudo curl -Sslk -o go.tar.gz "https://storage.googleapis.com/golang/go${GOLANG_VERSION}.linux-amd64.tar.gz"
-sudo tar -C /usr/local -xzf go.tar.gz
-sudo rm go.tar.gz
-sudo ln -s /usr/local/go/bin/* /usr/local/bin/
-go version
-sudo mkdir /go/
-export GOPATH=/go/
-go install github.com/google/gops@eebecad9f8eb8eab9cb9da639f1dd7942272c7d5 # v0.3.26
-go install github.com/onsi/ginkgo/ginkgo@d38b9d946d52cd175495d30143fbecc5aff98f13 # v1.16.5
-sudo ln -sf /go/bin/* /usr/local/bin/
-
-echo 'cd /root/go/src/github.com/cilium/cilium' >> /root/.bashrc
diff --git a/test/post_build_agent.sh b/test/post_build_agent.sh
deleted file mode 100755
index 508f31e6cf28f..0000000000000
--- a/test/post_build_agent.sh
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/usr/bin/env bash
-
-echo "output of following commands are ran on the Jenkins agent itself"
-echo "output of: \"ps -ef | grep -i vbox\" "
-ps -ef | grep -i vbox
-
-echo "output of: \"ps -ef | grep -i vagrant\" "
-ps -ef | grep -i vagrant
-
-echo "output of: \"VBoxManage --version\" "
-VBoxManage --version
-
-echo "output of: \"VBoxManage list runningvms\" "
-VBoxManage list runningvms
-
-echo "output of: \"VBoxManage list intnets\" "
-VBoxManage list intnets
diff --git a/test/vagrant-ci-start.sh b/test/vagrant-ci-start.sh
deleted file mode 100755
index 3b91863921940..0000000000000
--- a/test/vagrant-ci-start.sh
+++ /dev/null
@@ -1,52 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-K8S_NODES=${K8S_NODES:-2}
-
-echo "restarting portmap and nfs-kernel-server services to combat nfs server issues"
-systemctl restart portmap.service || true
-systemctl restart nfs-kernel-server.service || true
-
-echo "destroying vms in case this is a retry"
-for i in $(seq 1 $K8S_NODES); do
-    vagrant destroy k8s${i}-${K8S_VERSION} --force
-done
-
-echo "boxes available on the node"
-vagrant box list
-
-echo "starting vms"
-for i in $(seq 1 $K8S_NODES); do
-    vagrant up k8s${i}-${K8S_VERSION} --provision
-done
-
-if [ -n "${KUBECONFIG}" ]; then
-    echo "getting vagrant kubeconfig from provisioned vagrant cluster into ${KUBECONFIG}"
-    ./get-vagrant-kubeconfig.sh > ${KUBECONFIG}
-    KUBECTL="kubectl"
-else
-    echo "using vagrant ssh k8s1-${K8S_VERSION} for kubectl"
-    # No kube config, run kubectl in k8s1 via ssh
-    KUBECTL="vagrant ssh k8s1-${K8S_VERSION} -- kubectl"
-fi
-
-echo "checking whether kubeconfig works for vagrant cluster"
-NEXT_WAIT_TIME=0
-until ${KUBECTL} get nodes || [ $NEXT_WAIT_TIME -eq 12 ]; do
-   ((NEXT_WAIT_TIME++))
-   sleep 5
-done
-
-export HOME=${GOPATH}
-${KUBECTL} get nodes
-
-if [ -n "${CILIUM_REGISTRY}" ]; then
-    echo "adding local docker registry to cluster"
-    helm template registry-adder k8s/manifests/registry-adder --set IP="$(./print-node-ip.sh)" | ${KUBECTL} apply -f -
-fi
-
-echo "labeling nodes"
-for i in $(seq 1 $K8S_NODES); do
-    ${KUBECTL} label node k8s${i} cilium.io/ci-node=k8s${i} --overwrite
-done
diff --git a/test/vagrant-local-create-box.sh b/test/vagrant-local-create-box.sh
deleted file mode 100755
index 20ca5a7e04b7c..0000000000000
--- a/test/vagrant-local-create-box.sh
+++ /dev/null
@@ -1,22 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-export K8S_VERSION=${K8S_VERSION:-1.19}
-export LOCAL_BOX=k8s-box
-export LOCAL_BOXFILE=./.vagrant/${LOCAL_BOX}-package.box
-
-if [[ ! -f ${LOCAL_BOXFILE} ]]; then
-  echo "Updating vm image"
-  unset SERVER_BOX
-  unset SERVER_VERSION
-  export PRELOAD_VM=true
-  vagrant up k8s1-${K8S_VERSION} --provision
-  vagrant package k8s1-${K8S_VERSION} --output ${LOCAL_BOXFILE}
-  vagrant box add --name ${LOCAL_BOX} ${LOCAL_BOXFILE} --force
-  vagrant destroy k8s1-${K8S_VERSION} --force
-fi
-
-export SERVER_BOX=$LOCAL_BOX
-export SERVER_VERSION=0
-unset PRELOAD_VM
diff --git a/test/vagrant-local-start-runtime.sh b/test/vagrant-local-start-runtime.sh
deleted file mode 100755
index 0da6b737eeed6..0000000000000
--- a/test/vagrant-local-start-runtime.sh
+++ /dev/null
@@ -1,25 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-export K8S_VERSION=${K8S_VERSION:-1.19}
-
-echo "destroying runtime"
-vagrant destroy runtime --force 2>/dev/null
-
-if [ "$PRELOAD_VM" != "false" ]; then
-    ./vagrant-local-create-box.sh
-else
-    # Use defaults (see ../vagrant_box_defaults.rb)
-    unset SERVER_BOX
-    unset SERVER_VERSION
-fi
-
-if [[ "$NFS" != "0" ]]; then
-    echo "# NFS enabled. don't forget to enable these ports on your host"
-    echo "# before starting the VMs in order to have nfs working"
-    echo "# iptables -I INPUT -s 192.168.58.0/24 -j ACCEPT"
-fi
-
-echo "starting runtime vm"
-vagrant up runtime --provision
diff --git a/test/vagrant-local-start.sh b/test/vagrant-local-start.sh
deleted file mode 100755
index ca7ab7b0216c3..0000000000000
--- a/test/vagrant-local-start.sh
+++ /dev/null
@@ -1,41 +0,0 @@
-#!/usr/bin/env bash
-
-set -e
-
-export K8S_VERSION=${K8S_VERSION:-1.30}
-export K8S_NODES=${K8S_NODES:-2}
-
-echo "destroying vms"
-i=1
-while vagrant destroy k8s${i}-${K8S_VERSION} --force 2>/dev/null
-do
-  (( i++ ))
-done
-
-if [ "$PRELOAD_VM" != "false" ]; then
-    ./vagrant-local-create-box.sh
-else
-    # Use defaults (see ../vagrant_box_defaults.rb)
-    unset SERVER_BOX
-    unset SERVER_VERSION
-fi
-
-if [[ "$NFS" != "0" ]]; then
-    echo "# NFS enabled. don't forget to enable these ports on your host"
-    echo "# before starting the VMs in order to have nfs working"
-    echo "# iptables -I INPUT -s 192.168.58.0/24 -j ACCEPT"
-fi
-
-echo "starting vms"
-for i in $( seq 1 ${K8S_NODES} )
-do
-  echo "Starting k8s${i}-${K8S_VERSION}"
-  vagrant up k8s${i}-${K8S_VERSION} --provision
-done
-
-echo "labeling nodes"
-for i in $( seq 1 ${K8S_NODES} )
-do
-  echo "Labeling k8s${i}-${K8S_VERSION}"
-  vagrant ssh k8s1-${K8S_VERSION} -- kubectl label node k8s${i} cilium.io/ci-node=k8s${i} --overwrite
-done
diff --git a/test/vagrant_cleanup.sh b/test/vagrant_cleanup.sh
deleted file mode 100755
index d5a5ff5b83500..0000000000000
--- a/test/vagrant_cleanup.sh
+++ /dev/null
@@ -1,13 +0,0 @@
-#!/usr/bin/env bash
-
-K8S_NODES="${K8S_NODES:-2}"
-
-vagrant destroy -f
-
-i=1
-while [ "$i" -le "$K8S_NODES" ]; do
-    VBoxManage natnetwork remove --netname natnet$i
-    i=$((i+1))
-done
-
-VBoxManage natnetwork list
diff --git a/tools/dev-doctor/rootcmd.go b/tools/dev-doctor/rootcmd.go
index 983c811287537..13d49762517bd 100644
--- a/tools/dev-doctor/rootcmd.go
+++ b/tools/dev-doctor/rootcmd.go
@@ -158,26 +158,6 @@ func rootCmdRun(cmd *cobra.Command, args []string) {
 			versionRegexp: regexp.MustCompile(`Version: ` + versionRegex),
 			minVersion:    &semver.Version{Major: 3, Minor: 13, Patch: 0},
 		},
-		&binaryCheck{
-			name:          "vagrant",
-			ifNotFound:    checkInfo,
-			versionArgs:   []string{"--version"},
-			versionRegexp: regexp.MustCompile(`Vagrant ` + versionRegex),
-			minVersion:    &semver.Version{Major: 2, Minor: 0, Patch: 0},
-		},
-		&binaryCheck{
-			name:           "virtualbox",
-			alternateNames: []string{"VirtualBox"},
-			ifNotFound:     checkInfo,
-		},
-		&binaryCheck{
-			name:           "vboxheadless",
-			alternateNames: []string{"VBoxHeadless"},
-			ifNotFound:     checkInfo,
-			versionArgs:    []string{"--version"},
-			versionRegexp:  regexp.MustCompile(`Oracle VM VirtualBox Headless Interface ` + versionRegex),
-			hint:           "run \"VBoxHeadless --help\" to diagnose why vboxheadless failed to execute",
-		},
 		&binaryCheck{
 			name:          "pip3",
 			ifNotFound:    checkWarning,
diff --git a/vagrant_box_defaults.rb b/vagrant_box_defaults.rb
deleted file mode 100644
index ebff4f24cb935..0000000000000
--- a/vagrant_box_defaults.rb
+++ /dev/null
@@ -1,12 +0,0 @@
-# -*- mode: ruby -*-
-# vi: set ft=ruby
-Vagrant.require_version ">= 2.2.0"
-
-$SERVER_BOX = "cilium/ubuntu-4-19"
-$SERVER_VERSION= "73"
-$NETNEXT_SERVER_BOX= "cilium/ubuntu-next"
-$NETNEXT_SERVER_VERSION= "165"
-@v54_SERVER_BOX= "cilium/ubuntu-5-4"
-@v54_SERVER_VERSION= "40"
-@v419_SERVER_BOX= "cilium/ubuntu-4-19"
-@v419_SERVER_VERSION= "73"