Audit support improvement

Merge pull request #3105 from mirwan/remove_cilium_device_at_reset_plus_move_network_to_network_plugin_roles

Move network_plugin specific reset tasks to its role directory 

add ignore_patterns to ansible.cfg

cephfs-provisioner: Upgrade to v2.0.0-k8s1.11

add until option for etcd backup commands

add etcd version to etcd environment file to trigger a reload

SERIOUS Bug in download main.yml

add support for non-amd64 arch gcr.io images

Update docker package info for aarch64

Trigger reboot handler when version upgrade during update script

fix docker opts incompatible running on aarch64 Redhat/Centos

contrib/terraform/aws: Make path to generated inventory configurable

Quote false and yes, otherwise they'll be transformed to 'False', 'Yes'

fix curl get calico status error ( error in tls version, centos 7.3 1611)  

Upstream Changes:

-   cephfs-provisioner v2.0.0-k8s1.11 (https://github.com/kubernetes-incubator/external-storage/releases/tag/cephfs-provisioner-v2.0.0-k8s1.11)
-   Update ClusterRole

Our Changes:

-   Fix typo in defaults/main.yml (rs -> deploy)
-   Manifests cleanup

To avoid warning message when artifacts is generated within
the inventory directory

Reset tasks specific to a network_plugin moved inside its role directory + Reset tasks specific to cilium

Remove erroneous cloud-config task

fix glusterfs ppa and glusterfs server command name errors

Update CoreDNS to 1.2.0

Update openstack.md

[contrib/terraform/openstack] Add supplementary node groups

Update OWNERS

Support audit

cert-manager: Upgrade to 0.4.1

Upstream Changes:

-   cert-manager 0.4.1 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.1)

Our Changes:

-   Better templates sync with upstream manifests
-   Remove fancy resources requests/limits customization

ingress-nginx: Upgrade to 0.18.0

Upstream Changes:

-   ingress-nginx 0.18.0 (https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.18.0)

fluentd daemonset: do not set old nodeSelector.

* Disable locksmithd on CoreOS if coreos_auto_upgrade set to false

* change when format to support multiple-condition

Local volume provisioner: tolerate NoSchedule

Define custom playbook in Vagrantfile