Docker 1.13 changes the behaviour of iptables defaults from allow
to drop. This patch disables docker's iptables management as it was
in Docker 1.12 [1]

[1] https://github.com/docker/docker/pull/28257



Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Cleanup legacy syntax, spacing, files all to yml

speed up etcd preupgrade check

Update calico-cni to 1.5.6

fix typos in azure docs

fix load balancer DNS name index evaluation in openssl.conf

Update Kubernetes to v1.5.3

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Update Doc

Put Ansible requirements first

And re-phrase all sentences to passive tense

Safe disable SELinux

Sometimes, a sysadmin might outright delete the SELinux rpms and
delete the configuration. This causes the selinux module to fail
with
```
IOError: [Errno 2] No such file or directory: '/etc/selinux/config'\n",
"module_stdout": "", "msg": "MODULE FAILURE"}
```

This simply checks that /etc/selinux/config exists before we try
to set it Permissive.

Update from feedback

Migrate older inline= syntax to pure yml syntax for module args as to be consistant with most of the rest of the tasks
Cleanup some spacing in various files
Rename some files named yaml to yml for consistancy

Add graceful upgrade process

Calico does not allow renaming hosts

Fix fact tags

Ansible playbook fails when tags are limited to "facts,etcd" or to
"facts". This patch allows to run ansible-playbook to gather facts only
that don't require calico/flannel/weave components to be verified. This
allows to run ansible with 'facts,bootstrap-os' or just 'facts' to
gether facts that don't require specific components.

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Mount host's /var/log into kubelet container

Better control instance sizing

Fix references to CoreOS and Container Linux by CoreOS

fix typo in "kibana_base_url" variable name

* Git ignore the user controlled config.rb.
* Ability to better control the number of instances running.

Kubelet is responsible for creating symlinks from /var/lib/docker to /var/log
to make fluentd logging collector work.
However without using host's /var/log those links are invisible to fluentd.

This is done on rkt configuration too.

Fixes #967

This typo lead to kibana_base_url being undefined and Kibana used
default base URL ("/") which is incorrect with default proxy-based
access.

ask confirmation before running reset.yml playbook

Based on #718 introduced by rsmitty.

Includes all roles and all options to support deployment of
new hosts in case they were added to inventory.

Main difference here is that master role is evaluated first
so that master components get upgraded first.

Fixes #694

Change default network plugin to Calico

Looks like OpenSSL still properly handles it, even with duplicated
"DNS.X" items.