Update defaults to match k8s 1.12 suggestions (#3760)

* Update defaults to match k8s 1.12 suggestions

* Test if Netchecker works with node ip instead of localhost

* Update defaults to ipvs and coredns

* Update defaults for kube_apiserver_insecure_port

* Update main.yaml

roles/kubernetes/node/defaults/main.yml

@@ -18,7 +18,7 @@ kube_resolv_conf: "/etc/resolv.conf"
 kube_proxy_healthz_bind_address: "127.0.0.1"
 
 # Can be ipvs, iptables
-kube_proxy_mode: iptables
+kube_proxy_mode: ipvs
 
 # If using the pure iptables proxy, SNAT everything. Note that it breaks any
 # policy engine.

roles/kubespray-defaults/defaults/main.yaml

@@ -15,7 +15,7 @@ disable_swap: true
 kube_version: v1.12.2
 
 ## Kube Proxy mode One of ['iptables','ipvs']
-kube_proxy_mode: iptables
+kube_proxy_mode: ipvs
 
 # Kube-proxy nodeport address.
 # cidr to bind nodeport services. Flag --nodeport-addresses on kube-proxy manifest
@@ -44,7 +44,7 @@ cluster_name: cluster.local
 # Subdomains of DNS domain to be resolved via /etc/resolv.conf for hostnet pods
 ndots: 2
 # Can be dnsmasq_kubedns, kubedns, manual or none
-dns_mode: kubedns
+dns_mode: coredns
 
 # Should be set to a cluster IP if using a custom cluster DNS
 # manual_dns_server: 10.x.x.x
@@ -142,7 +142,7 @@ kube_apiserver_bind_address: 0.0.0.0
 kube_apiserver_port: 6443
 # http
 kube_apiserver_insecure_bind_address: 127.0.0.1
-kube_apiserver_insecure_port: 8080
+kube_apiserver_insecure_port: 0
 
 # dynamic kubelet configuration
 dynamic_kubelet_configuration: false