More recent versions of OpenStack Horizon provide Identity v2 and
Identity v3 versions of the RC file.

Flush handlers before etcd restart

Fix ansible 2.2.1 handling of registered vars

systemctl daemon-reload should be run before when task modifies/creates
union for etcd. Otherwise etcd won't be able to start

Closes #892

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Add idempotency checks for CI

Always trigger docker restart when docker package changes

Cert fail if inventory names too long

Docker upgrade doesn't auto-restart docker, causing failures
when trying to start another container

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

the openssl tools will fail to create signing requests because
the CN is too long.  This is mainly a problem when FQDNs are used
in the inventory file.

THis will truncate the hostname for the CN field only at the
first dot.  This should handle the issue for most cases.

Use only one certificate for all apiservers

https://github.com/kubernetes/kubernetes/issues/25063

preinstall fails on AWS CentOS7 image

Don't try to delete kargo specific config from dhclient when file does not exist

Also remove the check for != "RedHat" when removing the dhclient hook,
as this had also to be done on other distros. Instead, check if the
dhclienthookfile is defined.

the tasks fail because selinux prevents ip-forwarding setting.

Moving the tasks around addresses two issues.  Makes sure that
the correct python tools are in place before adjusting of selinux
and makes sure that ipforwarding is toggled after selinux adjustments.

Generate individual certificates for k8s hosts

Add tasks to undo changes to hosts /etc/resolv.conf and dhclient configs

Clarify major/minor/maintainance releases

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Docs updates

Fix mismatching inventory examples.
Add command examples.
Clarify groups use cases.

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Clarify release policy

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Adding /opt/cni /etc/cni to rkt run kubelet

Fix inventory generator link

Bind nginx localhost proxy to localhost

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Fix wrong path of dhclient on CentOS+Azure

Misc updates for canal

Fix docs formatting

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Update docs

Fix etcd cert generation for calico-rr role

Link docs to README, update README with recent info.
Update comparsions, add kubeadm vs kargo.
Better describe variables precedence UX impact.

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>