Move cluster roles and system namespace to new role

It is now enabled by default in 1.8 with the api changed
to networking.k8s.io/v1 instead of extensions/v1beta1.

This should be done after kubeconfig is set for admin and
before network plugins are up.

Use same kubedns_version: 1.14.5 in downloads  and kubernetes-apps/ansible roles

* Fix broken CI jobs

Adjust image and image_family scenarios for debian.
Checkout CI file for upgrades

* add debugging to file download

* Fix download for alternate playbooks

* Update ansible ssh args to force ssh user

* Update sync_container.yml

Also disable oom killer on etcd

This is to work around #1856 which can occur when kubelet
hostname and resolvable hostname (or cloud instance name)
do not match.

Signed-off-by: Haiwei Liu <carllhw@gmail.com>

Eventually 2.3 support will be dropped, so this is
a temporary change.

Match kubedns_version with roles/download/defaults/main.yml:kubedns_version: 1.14.5

Now adding unjoined members to existing etcd cluster
occurs one at a time so that the cluster does not
lose quorum.

Changed Ansible 2.3 to 2.4

* Refactor downloads to use download role directly

Also disable fact delegation so download delegate works acros OSes.

* clean up bools and ansible_os_family conditionals

Fixes #1129

* Update main.yml

Needs to set up resolv.conf before updating Yum cache otherwise no name resolution available (resolv.conf empty).

* Update main.yml

Removing trailing spaces

When downloading containers or files, use boolean
as a default value.

* Add possibility to insert more ip adresses in certificates

* Add newline at end of files

* Move supp ip parameters to k8s-cluster group file

* Add supplementary addresses in kubeadm master role

* Improve openssl indexes

This will allow running Kubespray when the user who runs it doesn't
have write permissions to the Kubespray dir, at least when not using
bastion.