While `do` looks cleaner, forcing this extra option in ansible.cfg
seems to be more invasive. It would be better to keep the traditional
approach of `set dummy = ` instead.

Fix check docker error for atomic

Fix issues #2611

Fix issues #2522 Support Debian stretch

https://download.docker.com/linux/debian/dists/

Fix typos (no logic changes)

Persist ip_vs modules

Rotate local-volume-provisioner token

Use legacy policy config to apply the scheduler policy

Properly check vsphere_cloud_provider.rc

istio: container download related things should defined in the download role

Bump ingress-nginx-controller to version 0.12.0

check if dedicated service account token signing key exists

local-volume-provisioner: container download related things should defined in the download role

Move cloud config configurations to proper location

* Add pre-upgrade task for moving credentials file

This reverts commit 7ef9f4df.

* add python interpreter workaround for localhost

cephfs-provisioner: container download related things should defined in the download role

registry: container download related things should defined in the download role

ingress-nginx: container download related things should defined in the download role

prometheus operator, metrics for k8s cluster

* Update etcd deployment to use correct cert and key

* Update to use admin cert for etcdctl commands

* Update handler to use admin cert too

Integrate jetstack/cert-manager 0.2.3 to Kubespray

node_labels documentation and kube-ingress label definition as role_node_label

Allow ansible_ssh_private_key_file for Openstack

Fix kubespray's ServiceAccount token signing keys