* Fix HA docs API access endpoints explained

Follow-up commit 81347298a3ef7932cbeb55e877644ca22d1625f1
and fix the endpoint value provided in HA docs.

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

* Clarify internal LB with external LB use case

* Clarify how to use both internal and external, non-cluster aware and
  not managed with Kubespray, LB solutions.
* Clarify the requirements, like TLS/SSL termination, for such an external LB.
  Unlike to the 'cluster-aware' external LB config, endpoints' security must be
  managed by that non-cluster aware external LB.
* Note that masters always contact their local apiservers via https://bip:sp.
  It's highly unlikely to go down and it reduces latency that might be
  introduced when going host->lb->host. Only computes go that path.

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

* Add a note for supplementary_addresses_in_ssl_keys

Explain how to benefit from supplementary_addresses_in_ssl_keys

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

* Add support for cert alt names for etcd

* Update gen_certs_vault.yml

Follow CLA doc to kubernetes/community

Auto configure API access endpoint with a custom bind IP, if provided.
Fix HA docs' http URLs are https in fact, clarify the insecure vs secure
API access modes as well.

Closes: #issues/2051

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Update checksum for kubeadm
Use v1.9.0 kubeadm params
Include hash of ca.crt for kubeadm join
Update tag for testing upgrades
Add workaround for testing upgrades
Remove scale CI scenarios because of slow inventory parsing
in ansible 2.4.x.

Change region for tests to us-central1 to
improve ansible performance

Update code-of-conduct.md

Refer to kubernetes/community as authoritative source for code of conduct

This does not update v1.9.0, but fixes two incompatibilities
when trying to deploy v1.9.0.

Starting with Kubernetes v1.8.4, kubelet ignores the AWS cloud
provider string and uses the override hostname, which fails
Node admission checks.

Fixes #2094

Renaming runtime docker_version to prevent setting that
value on the command line from breaking the play run.

This fixes #2081

Add possibility to create default OpenStack Cinder Storage Class

Closes: #1609

Ansible cannot seem to handle omitting delegate_to since v2.4.0.0.

Possibly related: https://github.com/ansible/ansible/issues/30760

Fixing alt_names for vault cert generation

set docker_version fact regardless of docker_dns in use

Fix domain id for OpenStack provider

Change OpenStack inventory to python2

Added proxy_env to scale and upgrade playbooks

Adding retries for vault-temp to come online

OpenStack authentication does not support using a mix of DomainID and
DomainName, only one or the other should be used.

append newline char to vault generated certs

For distribution who ship python3 as default python, it breaks the
inventory script as it is not compatible with python3.

- adding additional directories to cleanup (rkt/vault)
- targeting kubespray ansible groups instead of all

Update main.yml

Delete helm home

Remove RBAC from boolean checks

Add minimal keepalived-cloud-provider support

* Remove the network device created by the flannel

Remove the network device created by the flannel

* Modify flannel.1 device path

Modify flannel.1 device path

* remove trailing spaces

* Adding changes to handle updation of yum cache in rhel.

* Removed the redundant spaces