- Move CNI configuration creation for Calico to appropriate
network_plugin role from kubernetes/node.
- Add support for MTU configuration in Calico.

Replace calico-cni binaries with calico/cni container

Fix mountflags and kubelet config

Add missing --require-kubeconfig to the if..else stanza.
Make sure certs dirs mounted in RO.

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

update comment with valid options for bootstrap_os

Fix kubelet deprecated options

Fix etcd ssl for canal

Generate kubectl bash completion from kubectl instead of file

upgrade k8s version to 1.4.6

Fix collect_info script

--api-servers now just reads kubeconfig
--config is now --pod-manifest-path

Fixes #542

Fix missing journal ctl utc key.
Rework kube* logs collection.

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

- Move CNI configuration from `kubernetes/node` role to
`network_plugin/canal`
- Create SSL dir for Canal and symlink etcd SSL files
- Add needed options to `canal-config` configmap
- Run flannel and calico-node containers with proper configuration

Calico CNI binaries are also released/shipped in calico/cni
container. This patch replaces download of calico CNI binaries with
calico/cni container.

Ignore changes on check resolvconf task

Hostname alias fixes

Adds missing 'ip' var for terraform-generated inventory, based on internal ip

Fix ca certificate loading on CoreOS

Support new version of 'calicoctl' (>=v1.0.0)

Label k8s apps, adjust collect info commands

Fix policy controller

Since version 'v1.0.0-beta' calicoctl is written
in Go and its API differs from old Python based
utility. Added support of both old and new version
of the utility.

- Drop debugs from collect-info playbook
- Drop sudo from collect-info step and add target dir var (required for travis jobs)
- Label all k8s apps, including static manifests
- Add logs for K8s apps to be collected as well
- Fix upload to GCS as a public-read tarball

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Fix canal's calico networking config for ETCD TLS

'etcd_cert_dir' variable is missing from 'kubernetes-apps/ansible'
role which breaks Calico policy controller deployment.

Also fixing calico-policy-controller.yml.

Also fixes kube-apiserver upgrade that was erroneously
deleted in a previous commit.

Add etcd tls support

[WIP] Fix uploading CI logs to GCS

Adding support for canal network plugin

* Use gsutil to configure the logs bucket's lifecycle,
  which is not in the gc_storage module yet.
  (See https://cloud.google.com/storage/docs/gsutil_install

).
* Generate uniq bucket names extended with the build's OS type info as well.
* Ignore boto related errors for the gc_storage module.
* Use no_log when needed to supress noise/secrets in output

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>