Add some retry to the service proxy.
Give the API server access to TLS certs.

Moved the cert generation to a separate salt state and put it in a more appropriate sharable location (`/srv/kubernetes/`).
Merge pull request #2281 from brendandburns/proxy

Add some retry to the service proxy.
Merge pull request #2341 from jbeda/cert-gen

Give the API server access to TLS certs.
Add link to Weave+CoreOS implementation
do not fail build if unable to relabel selinux content

If the failure is a problem, the build will fail later.  But it is
possible that this is not a fatal issue and we should let things go
forward.  (a filesystem mounted with context=something in permissive
would cause chcon to fail, but the build to work)
Make client.Interface contain EndpointsNamespacer
util.EncodeJSON proven harmful, remove it everywhere

People were misusing EncodeJSON in tests when they should be using
runtime.EncodeOrDie(testapi.Codec(), obj).  Removing the potential
for cutting self on sharp objects.
Merge pull request #2346 from pmorie/endpoints

Make client.Interface contain EndpointsNamespacer
Merge pull request #2350 from smarterclayton/util_encodejson_proven_harmful

util.EncodeJSON proven harmful, remove it everywhere
Merge pull request #2348 from eparis/selinux-permissive

do not fail build if unable to relabel selinux content
Merge pull request #2344 from errordeveloper/master

Add link to Weave+CoreOS implementation