Lower weave RAM settings.

Adding vault role

enable proxy support on docker repository

Also add the system nameservers to upstream servers in dnsmasq

fix typo: "explicetely"

- Since Weave 1.8.x was rewritten in Golang we may decrease RAM settings
  to continue using g1-small for CI

Also make no-resolv unconditional again. Otherwise, we may end up in
a resolver loop. The resolver loop was the cause for the piling up
parallel queries.

Change docker save compress level to 1

Fix check for node-NODEID certs existence

Adding EFK logging stack

Host mount /dev for kubelet

Faster gzip improves CI deploy times by at least 2 mins.

Fixes #982

Re-tune ETCD performance params

Update playbooks to support new netchecker

Fixes upgrade from pre-individual node cert envs.

Reduce election timeout to 5000ms (was 10000ms)
Raise heartbeat interval to 250ms (was 100ms)
Remove etcd cpu share (was 300)
Make etcd_cpu_limit and etcd_memory_limit optional.

Prevent dynamic port allocation in nodePort range

Netchecker is rewritten in Go lang with some new args instead of
env variables. Also netchecker-server no longer requires kubectl
container. Updating playbooks accordingly.

Improve Weave

kube_apiserver_node_port_range should be accessible only
to kube-proxy and not be taken by a dynamic port allocation.

Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920
gets fixed.

Revert "Drop linux capabilities and rework users/groups"

- Remove weave CPU limits from .gitlab-ci.yml. Closes: #975
- Fix weave version in documentation

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

remove extra `~`

Add .swp .swo .swn to .gitignore

Drop linux capabilities and rework users/groups

Update roadmap.md

According to http://vimdoc.sourceforge.net/htmldoc/recover.html vim
creates .swo .swn .swp files. This patch adds them to .gitignore in all
directories recursively

Closes: #973

handle both 'ansible_host' and 'ansible_ssh_host' in bastion configration

remove deprecated ubuntu-bootstrap.yml script