Increase SSL TTL to 3650 days

In real scenarios 365 days is short period of time. 3650 days is good
enough for long running k8s environments

Uncomment one key/value in all.yml

all.yaml shouldn't be empty otherwise ansible won't be able to merge 2
dicts.

Related bug: ansible/issues/21889

Uncommented group_vars variables

Add default var role

Rework group/role vars

* Leave all.yml to keep only optional vars
* Store groups' specific vars by existing group names
* Fix optional vars casted as mandatory (add default())
* Fix missing defaults for an optional IP var
* Relink group_vars for terraform to reflect changes

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>

Add synthetic scale deployment mode

iptables switch for docker

Fix shell special vars

- Remove variable dup for Ubuntu
- Update Docker to 1.13

Docker 1.13 changes the behaviour of iptables defaults from allow
to drop. This patch disables docker's iptables management as it was
in Docker 1.12 [1]

[1] https://github.com/docker/docker/pull/28257



Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Cleanup legacy syntax, spacing, files all to yml

speed up etcd preupgrade check

Update calico-cni to 1.5.6

fix typos in azure docs

fix load balancer DNS name index evaluation in openssl.conf

Update Kubernetes to v1.5.3

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Update Doc

Put Ansible requirements first

And re-phrase all sentences to passive tense

Safe disable SELinux

Sometimes, a sysadmin might outright delete the SELinux rpms and
delete the configuration. This causes the selinux module to fail
with
```
IOError: [Errno 2] No such file or directory: '/etc/selinux/config'\n",
"module_stdout": "", "msg": "MODULE FAILURE"}
```

This simply checks that /etc/selinux/config exists before we try
to set it Permissive.

Update from feedback

This generates too much output and during upgrade scenarios
can bring us over the 4mb limit.