This allows overriding of apt repo endpoints when internet sources are not accessible. Additionally, switch to using the dockerproject.org gpg key url for apt instead of keyservers.net

All nodes get converted to lowercase, so certs should set
CN with lowercase as well.

Add reload yes to reload sysctl if the value of net.ipv4.ip_forward changes.

- name: Enable ip forwarding
  sysctl:
    sysctl_file: "{{sysctl_file_path}}"
    name: net.ipv4.ip_forward
    value: 1
    state: present
    reload: yes
  tags:
    - bootstrap-os

It is now enabled by default in 1.8 with the api changed
to networking.k8s.io/v1 instead of extensions/v1beta1.

This should be done after kubeconfig is set for admin and
before network plugins are up.

* Fix broken CI jobs

Adjust image and image_family scenarios for debian.
Checkout CI file for upgrades

* add debugging to file download

* Fix download for alternate playbooks

* Update ansible ssh args to force ssh user

* Update sync_container.yml

Also disable oom killer on etcd

This is to work around #1856 which can occur when kubelet
hostname and resolvable hostname (or cloud instance name)
do not match.

Signed-off-by: Haiwei Liu <carllhw@gmail.com>

Eventually 2.3 support will be dropped, so this is
a temporary change.

Match kubedns_version with roles/download/defaults/main.yml:kubedns_version: 1.14.5

Now adding unjoined members to existing etcd cluster
occurs one at a time so that the cluster does not
lose quorum.

* Refactor downloads to use download role directly

Also disable fact delegation so download delegate works acros OSes.

* clean up bools and ansible_os_family conditionals

Fixes #1129