update flannel

Sysctl reload if needed after IP forward enabling

Disable swap in vagrant vms

All nodes get converted to lowercase, so certs should set
CN with lowercase as well.

Add reload yes to reload sysctl if the value of net.ipv4.ip_forward changes.

- name: Enable ip forwarding
  sysctl:
    sysctl_file: "{{sysctl_file_path}}"
    name: net.ipv4.ip_forward
    value: 1
    state: present
    reload: yes
  tags:
    - bootstrap-os

Move cluster roles and system namespace to new role

It is now enabled by default in 1.8 with the api changed
to networking.k8s.io/v1 instead of extensions/v1beta1.

This should be done after kubeconfig is set for admin and
before network plugins are up.

Use same kubedns_version: 1.14.5 in downloads  and kubernetes-apps/ansible roles

* Fix broken CI jobs

Adjust image and image_family scenarios for debian.
Checkout CI file for upgrades

* add debugging to file download

* Fix download for alternate playbooks

* Update ansible ssh args to force ssh user

* Update sync_container.yml

Also disable oom killer on etcd

This is to work around #1856 which can occur when kubelet
hostname and resolvable hostname (or cloud instance name)
do not match.

Signed-off-by: Haiwei Liu <carllhw@gmail.com>

Eventually 2.3 support will be dropped, so this is
a temporary change.

Match kubedns_version with roles/download/defaults/main.yml:kubedns_version: 1.14.5

Now adding unjoined members to existing etcd cluster
occurs one at a time so that the cluster does not
lose quorum.

Changed Ansible 2.3 to 2.4

* Refactor downloads to use download role directly

Also disable fact delegation so download delegate works acros OSes.

* clean up bools and ansible_os_family conditionals

Fixes #1129