Add new addon Istio (#1744)

* add istio addon

* add addons to a ci job

roles/kubernetes/master/defaults/main.yml

@@ -44,6 +44,12 @@ kube_apiserver_admission_control:
   - ServiceAccount
   - DefaultStorageClass
   - ResourceQuota
+  - Initializers
+  - GenericAdmissionWebhook
+
+# extra runtime config
+kube_api_runtime_config:
+  - admissionregistration.k8s.io/v1alpha1
 
 ## Enable/Disable Kube API Server Authentication Methods
 kube_basic_auth: true

roles/kubernetes/master/templates/manifests/kube-apiserver.manifest.j2

@@ -45,6 +45,8 @@ spec:
 {% endif %}
     - --tls-cert-file={{ kube_cert_dir }}/apiserver.pem
     - --tls-private-key-file={{ kube_cert_dir }}/apiserver-key.pem
+    - --proxy-client-cert-file={{ kube_cert_dir }}/apiserver.pem
+    - --proxy-client-key-file={{ kube_cert_dir }}/apiserver-key.pem
 {% if kube_token_auth|default(true) %}
     - --token-auth-file={{ kube_token_dir }}/known_tokens.csv
 {% endif %}