Replace the raw rsync command with the synchronize module

[bugfix] Use bin_dir to find kubectl in contrib/metallb

Install Helm client on all masters

Remove --insecure-bind-address when insecure-port=0

Extra options for upgrade mode

Optionally do not drain nodes by setting drain_nodes to false
Optionally set a labelselector to target which pods should be drained.

Ensure etcd file permissions are correct when using vault

Fix wrong sa name in crb when psp is enabled

Change update strategy to RollingUpdate

Merge pull request #3288 from kubernetes-incubator/revert-3252-remove_insecure-bind-address_when_insecure-bind-port_is_0

Revert "Remove insecure-port and insecure-bind-address when possible"

When enable_network_policy is set to True with Calico 3 kubectl
apply fails with the error:

The Deployment "calico-kube-controllers" is invalid:
spec.strategy.rollingUpdate: Forbidden: may not be specified when
strategy type is 'Recreate'

See

https://github.com/kubernetes-incubator/kubespray/issues/3267

Changing the update strategy to RollingUpdate avoids this error.

Precision on control machine mixed Ansible installation

Add insecure_registry config to docker options

Upgrade kubernetes to v1.11.3

[helm-tls] add option to secure helm tiller with tls

Fix indent error by yamllint.

Remove insecure-port and insecure-bind-address when possible

Fix calico health checks

Add discovery_timeout to join configuration

https://godoc.org/k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha2#JoinConfiguration

[bugfix] heketi storageclass privilege