pip install doesn't work with absolute paths

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Set widely used header to execute python scripts in different OS

opensuse: Fix OpenSSL package name

Remove KPM support

Update Helm to latest version 2.9.1

Update README.md

Makeover of etcd- and etcd-cluster setup.

assert that number of pods on node does not exceed CIDR address range

The number of pods on a given node is determined by the  --max-pods=k
directive. When the address space is exhausted, no more pods can be
scheduled even if from the --max-pods-perspective, the node still has
capacity.

The special case that a pod is scheduled and uses the node IP in the
host network namespace is too "soft" to derive a guarantee.

Comparing kubelet_max_pods with kube_network_node_prefix when given
allows to assert that pod limits match the CIDR address space.

Remove unnecessary loadbalancer_apiserver binding on terraform AWS readme

Added MountFlags variable to docker options

* Upgrade k8s to 1.10.2

Bumped etcd version to 3.2.16 as recommended

* Add ipvs fix for v1.10

* change flannel addons test to ha

make admin.conf -> .kube/config non-executable

Bump kube-dns to 1.14.10

Update README.md

Upgrade kube-dns to 1.14.10
https://github.com/kubernetes/kubernetes/tree/master/cluster/addons/dns

https://github.com/kubernetes-incubator/kubespray/issues/2764

Added the requirement of pip for Vagrant users in readme.
See issue #2766

Almost certainly, the .kube/config file (YAML) should not be executable.

Restart scheduler when policy changes

Fix issue #2702: 'docker_bin_dir' is undefined when running ansible-playbook remove-node.yml

Fix privilege escalation timeout for remove-node playbook

add svc to netchecker-service.default.svc.cluster.local

* Move front-proxy-client certs back to kube mount

We want the same CA for all k8s certs

* Refactor vault to use a third party module

The module adds idempotency and reduces some of the repetitive
logic in the vault role

Requires ansible-modules-hashivault on ansible node and hvac
on the vault hosts themselves

Add upgrade test scenario
Remove bootstrap-os tags from tasks

* fix upgrade issues

* improve unseal logic

* specify ca and fix etcd check

* Fix initialization check

bump machine size