kube_apiserver_node_port_range should be accessible only
to kube-proxy and not be taken by a dynamic port allocation.

Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920
gets fixed.

Fixes Support for OpenStack v3 credentials

Remove nsenter workaround

DHCP Hook protections

- Docker 1.12 and further don't need nsenter hack. This patch removes
  it.  Also, it bumps the minimal version to 1.12.

Closes #776

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Fix CPU out of scope for Weave-net

- Set recommended CPU settings
- Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.
- Limit DS creation to master
- Combined 2 tasks into one with better condition

Rename weave-kube to weave-net

if the system doesn't have any config files at all.

Fix cert distribution at scale

Explicitly set config path for DNSMasq

Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.

Disable idempotency for ubuntu-weave-sep

Use stdin instead of bash args to pass node filenames and base64 data.
Use tempfile for master cert data

Weave kube

CI is failing 40% of the time due to errors in reset.
Let's disable idempotency check per-patch until we fix it.

Fixes #953

When DNSMasq is configured to read its settings
from a folder ('-7' or '--conf-dir' option) it only
checks that the directory exists and doesn't fail if
it's empty. It could lead to a situation when DNSMasq
is running and handles requests, but not properly
configured, so some of queries can't be resolved.

Bugfix: skip cloud_config on etcd

Fixing lint check for ci

Consolidating kube.py module

Update coreos-stable image

Our old coreos-stable image has docker 1.10

Switch to ansible_hostname in calico

For consistancy with kubernetes services we should use the same
hostname for nodes, which is 'ansible_hostname'.

Also fixing missed 'kube-node' in templates, Calico is installed
on 'k8s-cluster' roles, not only 'kube-node'.

add skippy stdout callback

Splitting out moderator check from syntax check

- Attempt to clarify CI runs from contributors

Update the group_vars for Terraform

also use kube_api_pwd for root account

Fix calico-rr peering with k8s masters

Pin docker version on RedHat and CentOS to the desired version

Specify the version of the credentials to download from Horizon

That way, it will not become stale.

Related bug #929

More recent versions of OpenStack Horizon provide Identity v2 and
Identity v3 versions of the RC file.