Restart kubelet when updating /etc/resolv.conf on all k8s nodes

Set ClusterFirstWithHostNet for Pods with hostnetwork: true

In kubernetes 1.6 ClusterFirstWithHostNet was added as an option. In
accordance to it kubelet will generate resolv.conf based on own
resolv.conf. However, this doesn't create 'options', thus the proper
solution requires some investigation.

This patch sets the same resolv.conf for kubelet as host

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Move graceful upgrade test to Ubuntu canal HA, adjust drain

Make any_errors_fatal configurable

Fix multiline condition for k8s check certs

pin ansible to version 2.2.1.0

Useful at scale when 1 or 2 noes my fail and you can proceed with
the majority and go back and fix the others later.

Necessary to persist this directory for host-local IPAM used by Canal
Add pre-upgrade task to copy /var/lib/cni out of old kubelet.

Use hostname module to set hostname, and do it for all Os not only Co…

Fixes #1190

add iptables --flush to reset role

Bump calico policy controller version

Fix multiline when condition in sync_certs task

Folded style in multiline 'when' condition causes error with
unexpected ident. Changing it to literal style should fix
the issue.

Closes #1190

1169 - fix docker systemd unit

ansible 2.2.2.0 has an [issue]() that causes problems for kargo:

```
(env) kargo ᐅ env/bin/ansible-playbook upgrade-cluster.yml 
ERROR! Unexpected Exception: 'Host' object has no attribute 'remove_group'
```

Pinning ansible to 2.2.1.0 resolved this for me.

Canal runs more pods and upgrades need a bit of extra
room to load new pods in and get the old ones out.

Allows config changes made by Ansible to restart dnsmasq deployment

Graceful upgrades require 3 nodes
Drain now has a command timeout of 40s

Refactor etcd role

Fix markdown of heading in README

- Run docker run from script rather than directly from systemd target
- Refactoring styling/templates

Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Latest released version of kube-policy-controller
contains important bug fixes and should be used
by default.