Change docker save compress level to 1

Fix check for node-NODEID certs existence

Adding EFK logging stack

Host mount /dev for kubelet

Faster gzip improves CI deploy times by at least 2 mins.

Fixes #982

Re-tune ETCD performance params

Update playbooks to support new netchecker

Fixes upgrade from pre-individual node cert envs.

Reduce election timeout to 5000ms (was 10000ms)
Raise heartbeat interval to 250ms (was 100ms)
Remove etcd cpu share (was 300)
Make etcd_cpu_limit and etcd_memory_limit optional.

Prevent dynamic port allocation in nodePort range

Netchecker is rewritten in Go lang with some new args instead of
env variables. Also netchecker-server no longer requires kubectl
container. Updating playbooks accordingly.

Improve Weave

kube_apiserver_node_port_range should be accessible only
to kube-proxy and not be taken by a dynamic port allocation.

Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920
gets fixed.

Revert "Drop linux capabilities and rework users/groups"

- Remove weave CPU limits from .gitlab-ci.yml. Closes: #975
- Fix weave version in documentation

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

remove extra `~`

Add .swp .swo .swn to .gitignore

Drop linux capabilities and rework users/groups

Update roadmap.md

According to http://vimdoc.sourceforge.net/htmldoc/recover.html vim
creates .swo .swn .swp files. This patch adds them to .gitignore in all
directories recursively

Closes: #973

handle both 'ansible_host' and 'ansible_ssh_host' in bastion configration

remove deprecated ubuntu-bootstrap.yml script

Signed-off-by: Vladimir Rutsky <rutsky.vladimir@gmail.com>

Fixes Support for OpenStack v3 credentials

'absible_ssh_host' is deprecated in Ansible 2.0 and at least
'contrib/inventory_builder/inventory.py' uses 'ansible_host' instead.

Remove nsenter workaround

DHCP Hook protections

- Docker 1.12 and further don't need nsenter hack. This patch removes
  it.  Also, it bumps the minimal version to 1.12.

Closes #776

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Fix CPU out of scope for Weave-net

- Set recommended CPU settings
- Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.
- Limit DS creation to master
- Combined 2 tasks into one with better condition

Rename weave-kube to weave-net

if the system doesn't have any config files at all.

Fix cert distribution at scale

Explicitly set config path for DNSMasq

Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.