Adjust etcd server certificates

ETCD doesn't need cert/key options set. It only requires peer
cert options.

workaround case for etcdctl not yet being installed, only allow for return code of 0 (no error)

Document commonly used Kargo vars

Fix Flannel network on CoreOS

Individual etcd ssl certs

    Resolves: #748

Raise ansible forks for CI test config

As we raised the flavor from small to standard, raise the ansible
forks from default 5 to 20 to speed up deployment.

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Add coreos-alpha weave manual CI builds

Includes hooks for triggering calico, kubelet, and kube-apiserver restarts
if etcd certs changed.

Add wait for kube-apiserver to kubernetes-apps

create systemd drop-in path if not existent

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Use preemptible instances

Revert "Do not forward private domains for upstream resolvers"

Fixes #777

Vagrant, skip synchronize tasks (bug #697)

Add download_always_pull check and sha256 for docker images

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Do not forward private domains for upstream resolvers

Add gitlab CI auto builds for triggers

Register master node as unschedulable

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

When download_run_once=True it will try to first download images to host
running vagrant, then upload the images from vagrant host to the vagrant
vms. While trying to upload the images it will ask for a the vagrant
linux user password.

For small environments this behaviour is unnecessary hence changing the
default to download_run_once=False inside the Vagrantfile seems like a
good fix.

check if calico_peer_rr is defined

Fix etcd to-SSL upgrade and task register vars

Allow triggered gitlab CI builds

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Also fix kube log level 4 to log dnsmasq queries.

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Co-authored-by: Matthew Mosesohn <mmosesohn@mirantis.com>