Fixes #1741

PID namespace sharing is disabled only in Kubernetes 1.7.
Explicitily enabling it by default could help reduce unexpected
results when upgrading to or downgrading from 1.7.

Include bin_dir when patching helm tiller with kubectl

Force synchronize to use ssh_args so it works when using bastion

Fix bool check assert

add hosts to rkt kubelet

In case ssh.config is set to use bastion, synchronize needs to use it too.

Adding calico/node env vars for prometheus configuration

Followup fix for CVE-2017-14491

Use image family for picking latest coreos image
Update python deps

* Upgrade to kubernetes v1.8.0

hyperkube no longer contains rsync, so now use cp

* Enable node authorization mode

* change kube-proxy cert group name

Move set_facts to kubespray-defaults defaults

Don't delegate cert gathering before creating admin.conf

These facts can be generated in defaults with a performance
boost.

Also cleaned up duplicate etcd var names.

Increase vagrant vm's memory size

* Test if tokens are expired from host instead of inside container

* Update main.yml

Insert a newline in bastion ssh config after ProxyCommand conditional

Improve playbook example of integration document

Fixes #1716

Fix system namespace creation
Only rotate tokens when necessary