Calico uses the loadbalancer to reach etcd if 'loadbalancer_address' is defined. The loadbalancer has to be configured first

Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs