check if dedicated service account token signing key exists

local-volume-provisioner: container download related things should defined in the download role

Move cloud config configurations to proper location

* Add pre-upgrade task for moving credentials file

This reverts commit 7ef9f4df.

* add python interpreter workaround for localhost

cephfs-provisioner: container download related things should defined in the download role

registry: container download related things should defined in the download role

ingress-nginx: container download related things should defined in the download role

prometheus operator, metrics for k8s cluster

* Update etcd deployment to use correct cert and key

* Update to use admin cert for etcdctl commands

* Update handler to use admin cert too

Integrate jetstack/cert-manager 0.2.3 to Kubespray

node_labels documentation and kube-ingress label definition as role_node_label

Allow ansible_ssh_private_key_file for Openstack

Fix kubespray's ServiceAccount token signing keys

* Only download container/file if host is in defined group

* Set correct when clause

* Fix last entries

* Update download groups

Fix etcd from import task to include task

Fix kubecert_node.results indexes

Switch hyperkube from CoreOS to Google

Update openssl.conf to count better and work with Jinja 2.9

only set no_proxy if other proxy vars are defined

Maybe vault health check needs delay

include do extension for jinja