-   cephfs-provisioner 06fddbe2 (https://github.com/kubernetes-incubator/external-storage/tree/06fddbe2/ceph/cephfs)

Noteable changes from upstream:

-   Added storage class parameters to specify a root path within the backing cephfs and, optionally, use deterministic directory and user names (https://github.com/kubernetes-incubator/external-storage/pull/696)
-   Support capacity (https://github.com/kubernetes-incubator/external-storage/pull/770)
-   Enable metrics server (https://github.com/kubernetes-incubator/external-storage/pull/797)

Other noteable changes:

-   Clean up legacy manifests file naming
-   Remove legacy manifests, namespace and storageclass before upgrade
-   `cephfs_provisioner_monitors` simplified as string
-   Default to new deterministic naming
-   Add `reclaimPolicy` support in StorageClass

With legacy non-deterministic naming style (where $UUID are generated ramdonly):

-   cephfs_provisioner_claim_root: /volumes/kubernetes
-   cephfs_provisioner_deterministic_names: false
-   Generated CephFS volume: /volumes/kubernetes/kubernetes-dynamic-pvc-$UUID
-   Generated CephFS user: kubernetes-dynamic-user-$UUID

With new default deterministic naming style (where $NAMESPACE and $PVC are predictable):

-   cephfs_provisioner_claim_root: /volumes
-   cephfs_provisioner_deterministic_names: true
-   Generated CephFS volume: /volumes/$NAMESPACE/$PVC
-   Generated CephFS user: k8s.$NAMESPACE.$PVC

Fix `coreos_dual` -> `coredns_dual` typo

See: e40368ae

fix the time of ca files are changed in make-ssl-etcd

* Fixup vault etcd

* Update main.yml

fix add etcd_events_access_address

fix template index out of range for pull images

Fix default value for dns_mode on the document

Adding uuidfile for rkt based vault to properly cleanup after itself

No need to install rkt on CoreOS

Make Calico nodename overridable on bare metal

Update efk stack

allow for configurable openstack storage class

Add run_once to remove-node

Fix the Python and pip version flag in the README

Add manage swap on the worker node

Update kube-scheduler policy

Fixed "network_plugin" variable

Enable by default the kubelet token auth

Improve variable handling for disabling etcd events cluster

The README says to check if Python and pip are installed type:

```
python -v && pip -v
```

Lowercase `-v` is `--verbose`, uppercase `-V` is `--version`. The
command should be:

```
python -V && pip -V
```

* Limit the maximum number of revisions saved per helm release

Fix inconsistent variables in task name and task message

CoreDNS uses cluster_name instead of dns_domain

parametrized iptables options for docker daemon

Add vm_name option to vsphere cloud provider config