Fixed counter in ETCD Openssl.conf

Allow connections from pods to local endpoints

Fix vault role in upgrade-cluster.yml

By default Calico blocks traffic from endpoints
to the host itself by using an iptables DROP
action. It could lead to a situation when service
has one alive endpoint, but pods which run on
the same node can not access it. Changed the action
to RETURN.

Ensure vagrant uses flannel

The Vagrantfile is setup to use flannel.  The default network
was changed to Calico (#1031).  However, the Vagrantfile was
not updated to reflect this.  Ensuring the Vagrantfile remains
functional on master, until someone decides to make it work
with Calico.

Adding KUBELET_CLOUDPROVIDER to kubelet.rkt.service

Remove upgrade from the ubuntu-rkt-sep CI job

Change kube-api default port from 443 to 6443

Operator can specify any port for kube-api (6443 default) This helps in
case where some pods such as Ingress require 443 exclusively.

Closes: 820
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Lower default memory requests

Make etcd data dir configurable.

Closes: #1073
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

This is to address out of memory issues on CI as well as help
fit deployments for people starting out with kargo on smaller
machines

When a apiserver_loadbalancer_domain_name is added to the Openssl.conf
the counter gets not increased correctly. This didnt seem to have an
effect at the current kargo version.

Using the command module instead of raw

Align LB defaults with the HA docs

Fix cluster.yml file extension in docs

Increase SSL TTL to 3650 days

In real scenarios 365 days is short period of time. 3650 days is good
enough for long running k8s environments

Uncomment one key/value in all.yml

all.yaml shouldn't be empty otherwise ansible won't be able to merge 2
dicts.

Related bug: ansible/issues/21889

Uncommented group_vars variables

Add default var role

Rework group/role vars

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

* Leave all.yml to keep only optional vars
* Store groups' specific vars by existing group names
* Fix optional vars casted as mandatory (add default())
* Fix missing defaults for an optional IP var
* Relink group_vars for terraform to reflect changes

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Add synthetic scale deployment mode

iptables switch for docker

Fix shell special vars