Vault security hardening and role isolation

.gitlab-ci.yml

cluster.yml

docs/vault.md

inventory/group_vars/all.yml

roles/adduser/defaults/main.yml

roles/download/defaults/main.yml

roles/download/tasks/main.yml

roles/etcd/defaults/main.yml

roles/etcd/meta/main.yml

roles/etcd/tasks/gen_certs_script.yml

roles/etcd/tasks/gen_certs_vault.yml

roles/etcd/tasks/main.yml

roles/etcd/tasks/sync_etcd_master_certs.yml

roles/etcd/tasks/sync_etcd_node_certs.yml

roles/kubernetes/node/tasks/install.yml

roles/kubernetes/preinstall/defaults/main.yml

roles/kubernetes/secrets/meta/main.yml

roles/kubernetes/secrets/tasks/gen_certs_script.yml

roles/kubernetes/secrets/tasks/gen_certs_vault.yml

roles/kubernetes/secrets/tasks/main.yml