Enable additional addresses to be added to certificates

Loadbalancer Apiserver Address is missing

Added option to set MTU on Weave

Dashboard template should not suffix with .yml.j2

KubeDNS template should not suffix with .yml.j2

Update and cleanup Local volume provisioner

Migrate Kubernetes v1.9.1 cluster/addons/registry to Kubespray

remove references to deprecated kubespray-cli

Support ipvs mode for kube-proxy

Fix can not use devicemapper driver

--etcd-quorum-read is depricated in kube >= 1.9

Upgrade to Kubernetes v1.9.2

Add missing group var default values to kubespray-defaults

Updated vSphere cloud provider config for Kubernetes >= v1.9.2 and added resource pool deployment variable

Vault should use cert auth for etcd

Simplify and update OpenStack cloud provider

Fix can not be used devicemapper driver

Make spliting system_search_domains more robust

Cloud resolvers are mandatory for hosts on GCE and OpenStack
clouds. The 8.8.8.8 alternative resolver was dropped because
there is already a default nameserver. The new var name
reflects the purpose better.

Also restart apiserver when modifying dns settings.

Fix the idx counter to increase too, or you will end up with two same indexes.

If you configure your external loadbalancer to do a simple tcp pass-through to the api servers, and you do not use a DNS FQDN but just the ip, then you need to add the ip adress to the certificates too.

Example config:

```
## External LB example config
apiserver_loadbalancer_domain_name: "10.50.63.10"
loadbalancer_apiserver:
  address: 10.50.63.10
  port: 8383
```

Bump kube-dns to 1.14.8

DNS entries generated from 'etcd_cert_alt_names' variable in etcd's
openssl.conf are not terminated by a newline.

This fixes issue #2207.