Version 1.9 has reduced verbosity for federation dns queries
which flood container logs.

Fix bad symlink

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Add tags

Add tags to allow more granular tasks filtering.
Add generator script for MD formatted tags found.
Add docs for tags how-to.

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Convert docker_versioned_pkg dict keys to string

This will allow to use '-e docker_version=1.12' in ansible playbook
execution. It's also backward-compatible and will work with floating
docker_version format in custom yaml files.

Closes #702

Use etcd host ip instead of hostname to build etcd_access_addresses

Symlink global vars for terraform

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Fix possible problems with legacy calicoctl

Add document outlining upgrade process

The variale etcd_access_addresses is used to determine
how to address communication from other roles to
the etcd cluster.

It was set to the address that ansible uses to
connect to instance ({{ item }})s and not the
the variable:
  ip_access
which had already been created and could already
be overridden through the access_ip variable.

This change allows ansible to connect to a machine using
a different address than the one used to access etcd.

Force hardlink for calico/canal certs

Fixes: #669

Change GCE sysctls placement and docs

Override GCE sysctl in /etc/sysctl.d/99-sysctl.conf instead of
the /etc/sysctl.d/11-gce-network-security.conf. It is recreated
by GCE, f.e. if gcloud CLI invokes some security related changes,
thus losing customizations we want to be persistent.

Update cloud providers firewall requirements in calico docs.

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

add cluster-signing to kube-controller-manager

When running legacy calicoctl we do not specify calico hostname in
calico-node container thus we should not specify it in CNI config.

Also move 'legacy_calicoctl' set_fact task to the top.

kube-controller-manager's cluster signing cert and key points by default to not
existing `/etc/kubernetes/ca/ca.pem` and `/etc/kubernetes/ca/ca.key` [docs][1]

[1]: http://kubernetes.io/docs/admin/kube-controller-manager/#options

Docker Options Refactor

Calico: fix peering with routers for new version

add restart flag for docker run kubelet

In new `calicoctl` version nodes peering with routers is broken.
We need to use predictable node names for calico-node and the
same names in calico `bgpPeer` resources and CNI.

Re-enable debian-8-kubespray image for CI

debian-8 image is missing memory cgroup, so it can't spawn pods.

Update calico-node systemd unit

GlusterFS server separate nodes and client facilities for k8s nodes.

New calicoctl does not support --detach=false option, so we should
use a recommended way to run calico-node service:
http://docs.projectcalico.org/v2.0/usage/configuration/as-service

Closes #674, #675

Add dbus socket dir to kube-proxy

Fix ipv4 forwarding on GCE

ipv4 forwarding gets broken when restarting networking, which
breaks all networking for all pods.

Update README: kargo-golang, slack, and travis urls