Squashed commits:
[f9355ea1] Swap order in which we reload docker/socket
[2ca6819c] Reload docker.socket after installing flannel on coreos

Workaround for #569
[9f976e56] Vagrantfile: setup proxy inside virtual machines

In corporate networks, it is good to pre-configure proxy variables.
[9d7142f4] Vagrantfile: use Ubuntu 16.04 LTS

Use recent supported version of Ubuntu for local development setup
with Vagrant.
[50f77cca] Add CI test layouts

* Drop Wily from test matrix
* Replace the Wily cases dropped with extra cases to test separate
  roles deployment

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
[03e162b3] Update OWNERS
[c7b00cae] Use tar+register instead of copy/slurp for distributing tokens and certs

Related bug: https://github.com/ansible/ansible/issues/15405

Uses tar and register because synchronize module cannot sudo on the
remote side correctly and copy is too slow.

This patch dramatically cuts down the number of tasks to process
for cert synchronization.
[2778ac61] Add new var skip_dnsmasq_k8s

If skip_dnsmasq is set, it will still not set up dnsmasq
k8s pod. This enables independent setup of resolvconf section
before kubelet is up.

stays up to date with main project

Enable smart facts cache for CI jobs

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Fix idempotency/recurrence of download and preinstall

* Don't push containers if not changed
* Do preinstall role only once and redistribute defaults to
  corresponding roles

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Enable standalone node deployment

Use absolute path for etcdctl

fix dnsmasq template cloud_provider lookup

Small fix. The shell module won't automatically resolve the path to the etcdctl binary, so i prefixed with {{ bin_dir }}/

Parameterize dependency endpoints

upgrade to k8s v1.4.3

Update roadmap for the kubeadm LCM track

update roadmap, kubeadm adoption

Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Update ha docs

Fix mismatch in code and docs, see
https://github.com/kubespray/kargo/pull/528



Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>

Signed-off-by: Chad Swenson <chadswen@gmail.com>

upgrade calico version v0.22.0

upgrade flannel version v0.6.2

[WIP] Add cluster-cidr to kube-proxy config

This option enables masquerading for traffic directed at pods
that comes frmom outside the cluster.

Add possibility to enable network policy via Calico network controller

Upgrade to kubernetes version 1.4.0

test to change the machine type

Revert "test to change the machine type"

This reverts commit 7a91f1b5405a39bee6cb91940b09a0b0f9d3aee1.

use google dns server when no upstream dns are defined

comment upstream_dns_servers

update documentation

remove deprecated kubelet flags

Revert "remove deprecated kubelet flags"

This reverts commit 21e3b893c896d0291c36a07d0414f4cb88b8d8ac.

The requirements for network policy feature are described here [1]. In
order to enable it, appropriate configuration must be provided to the CNI
plug in and Calico policy controller must be set up. Beside that
corresponding extensions needed to be enabled in k8s API.

Now to turn on the feature user can define `enable_network_policy`
customization variable for Ansible.

[1] http://kubernetes.io/docs/user-guide/networkpolicies/

Issues/535

and correct checksums

required for usage of Calico CNI plugin version 1.4.2

Use nginx proxy on non-master nodes to proxy apiserver traffic  

Also adds all masters by hostname and localhost/127.0.0.1 to
apiserver SSL certificate.

Includes documentation update on how localhost loadbalancer works.

Allow calico to configure pool if tree exists, but no pools defined