Persist ip_vs modules

Rotate local-volume-provisioner token

Use legacy policy config to apply the scheduler policy

Properly check vsphere_cloud_provider.rc

istio: container download related things should defined in the download role

Bump ingress-nginx-controller to version 0.12.0

check if dedicated service account token signing key exists

local-volume-provisioner: container download related things should defined in the download role

Move cloud config configurations to proper location

* Add pre-upgrade task for moving credentials file

This reverts commit 7ef9f4df.

* add python interpreter workaround for localhost

cephfs-provisioner: container download related things should defined in the download role

registry: container download related things should defined in the download role

ingress-nginx: container download related things should defined in the download role

prometheus operator, metrics for k8s cluster

* Update etcd deployment to use correct cert and key

* Update to use admin cert for etcdctl commands

* Update handler to use admin cert too

Integrate jetstack/cert-manager 0.2.3 to Kubespray

node_labels documentation and kube-ingress label definition as role_node_label

Allow ansible_ssh_private_key_file for Openstack

Fix kubespray's ServiceAccount token signing keys

* Only download container/file if host is in defined group

* Set correct when clause

* Fix last entries

* Update download groups

Fix etcd from import task to include task