Add a pkg for iptables support

This makes iptables an injectable dependency.  The test for this started off
simple, but got a bit out of hand.  It's starting to become a mocking
framework.
Fix malformed namespace json tag
Add the missing arg in Errorf.
fix error message in validation test
fix captured loop variable
Fix struct tag in apparently untested config struct
Merge pull request #1636 from dchen1107/termination

Add the missing arg in Errorf.
Fix mismatched arg and formatter in Errorf
fix extra un-cosmetic extraneous code.
Merge pull request #1637 from lavalamp/fix

Fix 'go vet' issues
Allow etcd config file to be passed to apiserver, kubelet, and proxy
Add some documentation for the container environment.
Add codec to restlient test.
Merge pull request #1640 from ddysher/restclient_test

Add codec to restlient test.
Merge pull request #1445 from brendandburns/docs

Add some documentation for the container environment.
Make ResourceVersion a string internally instead of uint64

Allows us to define different watch versioning regimes in the future
as well as to encode information with the resource version.

This changes /watch/resources?resourceVersion=3 to start the watch at
4 instead of 3, which means clients can read a resource version and
then send it back to the server. Clients should no longer do math on
resource versions.
Change test cases to verify the client sends the received resourceVersion
Fix an issue on GetContainerInfo.

I believe the issue was first introduced when we append namespace to docker
container's name. This is a temporary fix for #160.
Merge pull request #1646 from dchen1107/termination

Fix an issue on GetContainerInfo.
Merge pull request #1597 from thockin/iptables

Add a pkg for iptables support