* Changre raw execution to use yum module

Changed raw exection to use yum module provided by Ansible.

* Replace ansible_ssh_* by ansible_*

Ansible 2.0 has deprecated the “ssh” from ansible_ssh_user, ansible_ssh_host, and ansible_ssh_port to become ansible_user, ansible_host, and ansible_port. If you are using a version of Ansible prior to 2.0, you should continue using the older style variables (ansible_ssh_*). These shorter variables are ignored, without warning, in older versions of Ansible.

I am not sure about the broader impact of this change. But I have seen on the requirements the version required is ansible>=2.4.0.

http://docs.ansible.com/ansible/latest/intro_inventory.html

* add istio addon

* add addons to a ci job

This role only support Red Hat type distros and is not maintained
or used by many users. It should be removed because it creates
feature disparity between supported OSes and is not maintained.

This reverts commit 4209f1cb.

* Security fixes for etcd

* Use certs when querying etcd

* Clear admin kubeconfig when rotating certs

* Update main.yml

* Rename dns_server to dnsmasq_dns_server so that it includes role prefix
as the var name is generic and conflicts when integrating with existing ansible automation.
*  Enable selinux state to be configurable with new var preinstall_selinux_state

* Set no_proxy to all local ips

* Use proxy settings on all necessary tasks

Fixes #1741

PID namespace sharing is disabled only in Kubernetes 1.7.
Explicitily enabling it by default could help reduce unexpected
results when upgrading to or downgrading from 1.7.

Include bin_dir when patching helm tiller with kubectl

Force synchronize to use ssh_args so it works when using bastion

Fix bool check assert

add hosts to rkt kubelet

In case ssh.config is set to use bastion, synchronize needs to use it too.

Adding calico/node env vars for prometheus configuration

Followup fix for CVE-2017-14491

Use image family for picking latest coreos image
Update python deps

* Upgrade to kubernetes v1.8.0

hyperkube no longer contains rsync, so now use cp

* Enable node authorization mode

* change kube-proxy cert group name

Move set_facts to kubespray-defaults defaults

Don't delegate cert gathering before creating admin.conf

These facts can be generated in defaults with a performance
boost.

Also cleaned up duplicate etcd var names.