Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs