Change docker save compress level to 1

Fix check for node-NODEID certs existence

Adding EFK logging stack

Host mount /dev for kubelet

Faster gzip improves CI deploy times by at least 2 mins.

Fixes #982

Re-tune ETCD performance params

Update playbooks to support new netchecker

Fixes upgrade from pre-individual node cert envs.

Reduce election timeout to 5000ms (was 10000ms)
Raise heartbeat interval to 250ms (was 100ms)
Remove etcd cpu share (was 300)
Make etcd_cpu_limit and etcd_memory_limit optional.

Prevent dynamic port allocation in nodePort range

Netchecker is rewritten in Go lang with some new args instead of
env variables. Also netchecker-server no longer requires kubectl
container. Updating playbooks accordingly.

Improve Weave

kube_apiserver_node_port_range should be accessible only
to kube-proxy and not be taken by a dynamic port allocation.

Potentially temporary if https://github.com/kubernetes/kubernetes/issues/40920
gets fixed.

Revert "Drop linux capabilities and rework users/groups"

- Remove weave CPU limits from .gitlab-ci.yml. Closes: #975
- Fix weave version in documentation

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

remove extra `~`

Add .swp .swo .swn to .gitignore

Drop linux capabilities and rework users/groups

Update roadmap.md

According to http://vimdoc.sourceforge.net/htmldoc/recover.html vim
creates .swo .swn .swp files. This patch adds them to .gitignore in all
directories recursively

Closes: #973

handle both 'ansible_host' and 'ansible_ssh_host' in bastion configration

remove deprecated ubuntu-bootstrap.yml script

Signed-off-by: Vladimir Rutsky <rutsky.vladimir@gmail.com>

Fixes Support for OpenStack v3 credentials

'absible_ssh_host' is deprecated in Ansible 2.0 and at least
'contrib/inventory_builder/inventory.py' uses 'ansible_host' instead.

Remove nsenter workaround

DHCP Hook protections

- Docker 1.12 and further don't need nsenter hack. This patch removes
  it.  Also, it bumps the minimal version to 1.12.

Closes #776

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Fix CPU out of scope for Weave-net

- Set recommended CPU settings
- Cleans up upgrade to weave 1.82. The original WeaveWorks
daemonset definition uses weave-net name.
- Limit DS creation to master
- Combined 2 tasks into one with better condition

Rename weave-kube to weave-net

if the system doesn't have any config files at all.

Fix cert distribution at scale

Explicitly set config path for DNSMasq