Upstream Changes:

-   weave 2.4.0 (https://github.com/weaveworks/weave/releases/tag/v2.4.0)
-   Support `externalTrafficPolicy: Local` (https://github.com/weaveworks/weave/issues/2924)
-   Make the ipset list size bigger (https://github.com/weaveworks/weave/pull/3305)
-   Break out of kube rm-peers loop if nothing changes (https://github.com/weaveworks/weave/pull/3317)

Our Changes:

-   Revamp weave-net.yml.j2 with upstream changes
-   Add more variables for customization
-   Replace WEAVE_PASSWORD with k8s secret
-   Remove hard-corded seed mode support, in favor of variables customization

cert-manager: Upgrade to 0.4.0

allow for setting the cacert on openstack cloud provider

Adding cluster_name to api cert alt name for vault

Configure openstack subnet cidr

dashboard_token_ttl option override possibility with default

Variablize kube_proxy_healthz_bind_address

update .gitignore

Add support for docker 17.09

Fix a broken symbolic link for group_vars

availability zones support for OpenStack

Service file binary place mismatch

Upstream Changes:

-   cert-manager 0.4.0 (https://github.com/jetstack/cert-manager/releases/tag/v0.4.0)

According to cluster/binary.yml vault binary will be placed to `{{ bin_dir }}` and according to `inventory/sample/group_vars/all.yml` that is 
`inventory/sample/group_vars/all.yml`

Fix yaml roles error

fix missing libraries on newer coreos versions

- add vim default backup file *~
- remove duplicated *sw[pon]

Clarify etcd deployment script failure mechanism

set LC_ALL=C for growpart

allow masters, nodes and gluster nodes (within each group) to be scheduled
on differents AZ.

add openstack security group for traffic to 30000-32767/tcp on worker nodes

Follow upstream

Attempting to clarify the language surrounding the etcd node deployment script failure mechanism. I had this error when doing a new cluster deployment last night and, though it should have been, it wasn't immediately apparent to me what was causing the issue (since my default master node hostnames do not specify whether they are also acting as etcd replicas).

Fix label of registry in README

This will make NodePort services work out of the box

Remove double slash

Even without this PR, the operation works well.
However, it is better to use a single slash rather than
a double slash in the path.

This fixes #3014

Include etcd and masters in adding node doc

Fixed kubectl path.