* calico upgrade to v3

* update calico_rr version

* add missing file

* change contents of main.yml as it was left old version

* enable network policy by default

* remove unneeded task

* Fix kubelet calico settings

* fix when statement

* switch back to node-kubeconfig.yaml

Fix install audit failed

1.fix audit log not write
2.fix Parameter not recognized
3.delete kubedm futuregates auditing and use apiServerExtraArgs

PodSecurityPolicy admission controller support

new cilium stable version: 1.2.0

Update ansible.md 

Add ubuntu18 ci job

Always create service account even rbac_enabled = false

allow '.' in hostnames for verify bad hostnames

we use FQDN as inventory_hostname

Add kubeadm controlplaneEndpoint

Audit log to stdout with kubeadm

Custom audit policy

Add --dns-loop-detect to dnsmasq used in kube-dns

Define apiserver flags directly instead of relying on auditPolicy section in order to have the ability to redirect audit log to stdout with kubeadm

Add bad hostname preflight check

cephfs-provisioner: Upgrade to v2.0.1-k8s1.11

Fix kubeadm client conf

Hostname must be a valid DNS name, which is checked as https://github.com/kubernetes/apimachinery/blob/master/pkg/util/validation/validation.go#L115

The situation I have encountered is that my hostname contained underscore which is disallowed and apiserver refused to start.

Nginx LB(default)
Other LB by kubeadm controlplane

Fix install nss

Fix pull dns image error

Remove unused configuration

Fix k8s-dns-dnsmasq-nanny repo path

Audit support improvement