Fixed sync_tokens fact
Fixed sync_certs for k8s tokens fact
Disabled register docker images changability
Fixed CNI dir permission
Fix idempotency for etcd pre upgrade checks

Explicitly set cni-bin-dir

Added Support for OpenID Connect Authentication

Add node labels in kubelet

Reference external documentation sources

Removing cloud_provider tag to fix scenario where cloud_provider is n…

Related-issue: https://github.com/kubernetes/community/issues/300
Upgraded nodes do not obtain labels automatically.
See https://github.com/kubernetes/kubernetes/pull/29459 for more details.

To use OpenID Connect Authentication beside deploying an OpenID Connect
Identity Provider it is necesarry to pass additional arguments to the Kube API Server.
These required arguments were added to the kube apiserver manifest.

Adding vsphere cloud provider support

Disable vault role properly on ansible 2.2.0

Remove standalone etcd specific play, cleanup host mode

when condition does not seem to work correctly at playbook
level for ansible 2.2.0.

Now etcd role can optionally disable etcd cluster setup for faster
deployment when it is combined with etcd role.

Use find module for checking for certificates

Added Missing AWS IAM Profiles and Policies

The AWS IAM profiles and policies required to run Kargo on AWS
are no longer hosted in the kubernetes main repo since kube-up got
deprecated. Hence we have to move the files into the kargo repository.

Also generate certs only when absent on master (rather than
when absent on target node)

Add support for atomic host

Possibility to add Loadbalancers without static IP (e.g. AWS ELB) #1074

fix inline verbatim blocks formatting in markdown

Allow to specify etcd backend for kube-api

Add autoscalers for dnsmasq and kubedns

By default kubedns and dnsmasq scale when installed.
Dnsmasq is no longer a daemonset. It is now a deployment.
Kubedns is no longer a replicationcluster. It is now a deployment.
Minimum replicas is two (to enable rolling updates).

Reduced memory erquirements for dnsmasq and kubedns

Until now it was not possible to add an API Loadbalancer
without an static IP Address. But certain Loadbalancers
like AWS Elastic Loadbalanacer dontt have an fixed IP address.
With this commit it is possible to add these kind of Loadbalancers
to the Kargo deployment.

Add upgrade-cluster and reset playbooks to syntax check

Added host_vars to gitignore

Use docker-engine 1.13.1

The default version of Docker was switched to 1.13 in #1059.  This
change also bumped ubuntu from installing docker-engine 1.13.0 to
1.13.1.  This PR updates os families which had 1.13 defined, but
were using 1.13.0.

The impetus for this change is an issue running tiller 1.2.3 on
docker 1.13.0.  See discussion [1][2].

[1] https://github.com/kubernetes/helm/issues/1838
[2] https://github.com/kubernetes-incubator/kargo/pull/1100

Since inventory ships with kargo, the ability to change functionality
without having a dirty git index is nice.  An example, we wish to change
is the version of docker deployed to our CentOS systems.  Due to an issue
with tiller and docker 1.13, we wish to deploy docker 1.12.  Since this
change does not belong in Kargo, we wish to locally override the docker
version, until the issue is sorted.

Restart kube-controller for host_resolvconf mode

Updates based on feedback

Simplify checks for file exists

remove invalid char

Review feedback. Use regular systemd file.

Add template for docker systemd atomic

Fixed counter in ETCD Openssl.conf

Allow connections from pods to local endpoints