change create to apply

* Add tags for cert serial tasks

This will help facilitate tag-based deployment of specific components.

* fixup kubernetes node

Add TF_VAR_ to terraform env

CheckNodePIDPressure is not supported in v1.10

Update README.md

cephfs-provisioner: Upgrade to 06fddbe2

move node selection from --limit to --extra-vars=node<nodename>"

-   cephfs-provisioner 06fddbe2 (https://github.com/kubernetes-incubator/external-storage/tree/06fddbe2/ceph/cephfs)

Noteable changes from upstream:

-   Added storage class parameters to specify a root path within the backing cephfs and, optionally, use deterministic directory and user names (https://github.com/kubernetes-incubator/external-storage/pull/696)
-   Support capacity (https://github.com/kubernetes-incubator/external-storage/pull/770)
-   Enable metrics server (https://github.com/kubernetes-incubator/external-storage/pull/797)

Other noteable changes:

-   Clean up legacy manifests file naming
-   Remove legacy manifests, namespace and storageclass before upgrade
-   `cephfs_provisioner_monitors` simplified as string
-   Default to new deterministic naming
-   Add `reclaimPolicy` support in StorageClass

With legacy non-deterministic naming style (where $UUID are generated ramdonly):

-   cephfs_provisioner_claim_root: /volumes/kubernetes
-   cephfs_provisioner_deterministic_names: false
-   Generated CephFS volume: /volumes/kubernetes/kubernetes-dynamic-pvc-$UUID
-   Generated CephFS user: kubernetes-dynamic-user-$UUID

With new default deterministic naming style (where $NAMESPACE and $PVC are predictable):

-   cephfs_provisioner_claim_root: /volumes
-   cephfs_provisioner_deterministic_names: true
-   Generated CephFS volume: /volumes/$NAMESPACE/$PVC
-   Generated CephFS user: k8s.$NAMESPACE.$PVC

Fix `coreos_dual` -> `coredns_dual` typo

See: e40368ae

fix the time of ca files are changed in make-ssl-etcd

* Fixup vault etcd

* Update main.yml

fix add etcd_events_access_address

fix template index out of range for pull images

Fix default value for dns_mode on the document

Adding uuidfile for rkt based vault to properly cleanup after itself

No need to install rkt on CoreOS

Make Calico nodename overridable on bare metal

Update efk stack

allow for configurable openstack storage class

Add run_once to remove-node

Fix the Python and pip version flag in the README

Add manage swap on the worker node