ask confirmation before running reset.yml playbook

Change default network plugin to Calico

set "check_mode: on" for read-only "shell" steps that registers result

remove temporary file

Add timings to RECAP output.

- Starting from version 2.0 ansible has 'callback_whitelist =
  profile_tasks'. It allows to analyze CI to find some time regressions.
- Add skippy to CI's ansible.cfg

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Adding support for proxy w/ rkt kubelet

Update calico to v1.0.2

Disable kube_proxy_masquerade_all

Multiples doc fixes

Install pip on Ubuntu

Replace always_run with check_mode

Set ssl_ca_dirs for rkt based on fact

- Refactor 'Check if bootstrap is needed' as ansible loop. This allows
  to add new elements easily without refactoring. Add pip to the list.
- Refactor 'Install python 2.x' task to run once if any of rc
  codes != 0. Actually, need_bootstrap is array of hashes, so map will
  allow to get single array of rc statuses. So if status is not zero it
  will be sorted and the last element will be get, converted to bool.

Closes: #961
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Install pip on Ubuntu

Clean up dnsmasq purge task

"shell" step doesn't support check mode, which currently leads to failures,
when Ansible is being run in check mode (because Ansible doesn't run command,
assuming that command might have effect, and no "rc" or "output" is registered).

Setting "check_mode: no" allows to run those "shell" commands in check mode
(which is safe, because those shell commands doesn't have side effects).

Closes: #961
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Document gitlab-runner.sh

always_run was deprecated in Ansible 2.2 and will be removed in 2.4
ansible logs contain "[DEPRECATION WARNING]: always_run is deprecated.
Use check_mode = no instead". This patch fix deprecation.

Also calico-cni to v1.5.6, calico-policy to v0.5.2

Fixes: #1011

Since systemd kubelet.service has {{ ssl_ca_dirs }}, fact should be
gathered before writing kubelet.service.

Closes: #1007
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Add CI cases for testing upgrade from v2.0.1 release

Add kernel upgrade for CentOS

Enable reset of dnsmasq if manifest or config changes

Fixes #1012

Fix misleading HA docs

use ansible sysctl module for config ip forwarding

Signed-off-by: Bogdan Dobrelya <bogdando@mail.ru>