[helm-tls] add option to secure helm tiller with tls

Fix indent error by yamllint.

Remove insecure-port and insecure-bind-address when possible

Fix calico health checks

Add discovery_timeout to join configuration

https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha2#JoinConfiguration

[bugfix] heketi storageclass privilege

Fix backward compatibility with calico 2.6

Add missing variable kube_proxy_nodeport_addresses

Fix openstack cacert task

Reduce instance sizes in gce

put back endif in kubelet rkt template

Heketi/GlusterFS 

remove broken endifs in kubelet rkt mode

Upgrade pause image to 3.1

resolve issues with new cacert feature

Fix feature-gates

Reverts calico update to 3.2.0, fixes #3223

Fix the tryUpdateNodeStatus link