Update Calico and Canal

Set exact user for Kubelet services

Remove  kibana_base_url

Fixed inventory file creation

add etc tunning options

https://coreos.com/etcd/docs/latest/tuning.html

etcd_snapshot_count
and
ionice priority

The default for kibana_base_url does not make sense an makes kibana unusable. The default path forces a 404 when you try to open kibana in the browser. Not setting kibana_base_url works just fine.

optional calico_ip_auto_method variable with IP_AUTODETECTION_METHOD

Upgrade Weave to 2.2.1

- Fix #2414, so namespace isolation should now works
- Update weave-net.yml.j2 as per latest https://cloud.weave.works/k8s/net
- Other minor fixup

can be set to one of
first-found
can-reach 
interface

CephFS Provisioner Addon Fixup

- Updating to use calico-node v2.6.7
- A few updates to their manifests too

Registry Addon Fixup

Some of the versions does not match. Fix this.

Update kube-apiserver.manifest.j2 and kubeadm-config.yaml.j2 to incorporate `endpoint-reconciler-type: lease` 

Only apply roles from first master node to fix regression

Only copy tokens if tokens_list contains any

Cilium v.1.0.0-rc8

Upgraded kubernetes from 1.9.3 to 1.9.5

set local_release_dir in downloads to match others

Update flannel version to v0.10.0

Fix duplicate --proxy-client-cert-file and --proxy-client-key-file

Addition of the .creds extension to the credentials files generated by password lookup in order for Ansible not to consider them as inventory files with inventory_ignore_extensions set accordingly (#2446)

Add --iface-regex options to flannel