fix kube_apiserver_ip/kube_apiserver_port description

Fix upgrade for all daemonset type resources

Lower weave RAM settings.

Adding vault role

enable proxy support on docker repository

Also add the system nameservers to upstream servers in dnsmasq

fix typo: "explicetely"

- Since Weave 1.8.x was rewritten in Golang we may decrease RAM settings
  to continue using g1-small for CI

Daemonsets cannot be simply upgraded through a single API call,
regardless of any kubectl documentation. The resource must be
purged and then recreated in order to make any changes.

Also make no-resolv unconditional again. Otherwise, we may end up in
a resolver loop. The resolver loop was the cause for the piling up
parallel queries.

Change docker save compress level to 1

Fix check for node-NODEID certs existence

Adding EFK logging stack

Host mount /dev for kubelet

Faster gzip improves CI deploy times by at least 2 mins.

Fixes #982

Re-tune ETCD performance params

Update playbooks to support new netchecker

Fixes upgrade from pre-individual node cert envs.

Reduce election timeout to 5000ms (was 10000ms)
Raise heartbeat interval to 250ms (was 100ms)
Remove etcd cpu share (was 300)
Make etcd_cpu_limit and etcd_memory_limit optional.

Prevent dynamic port allocation in nodePort range

Netchecker is rewritten in Go lang with some new args instead of
env variables. Also netchecker-server no longer requires kubectl
container. Updating playbooks accordingly.

Improve Weave

kube_apiserver_node_port_range should be accessible only
to kube-proxy and not be taken by a dynamic port allocation.

Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920
gets fixed.

Revert "Drop linux capabilities and rework users/groups"

- Remove weave CPU limits from .gitlab-ci.yml. Closes: #975
- Fix weave version in documentation

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

remove extra `~`

Add .swp .swo .swn to .gitignore

Drop linux capabilities and rework users/groups

Update roadmap.md