Release 2.8 robust san handling (kubernetes-sigs#4478)

* robust handling of API server SANs for 2.8 branch

* use apiserver_loadbalancer_domain_name if it is defined, according to PR 3977

Upgrade to Ansible >2.7.0 (kubernetes-sigs#4471)

go to k8s 1.12.7 (kubernetes-sigs#4400)

backport cve-2019-5736 to release-2.8 (kubernetes-sigs#4234)

* [SECURITY] Docker patches for CVE-2019-5736 (kubernetes-sigs#4223)

This updates docker 18.06 and 18.09 with the two patches released
yesterday to address the new runc exploit. Details here:
https://kubernetes.io/blog/2019/02/11/runc-and-cve-2019-5736/

* keep edge versions to same minor

* keep edge versions to same minor

Upgrade to 1.12.5 (kubernetes-sigs#4066)

More Feature/2.8 backports for 2.8.1 (kubernetes-sigs#3911)

* Move node-cidr-mask-size to ControllerManagerextraArgs (kubernetes-sigs#3845)

* Fix apiServerCertSANs in kubeadm config file (kubernetes-sigs#3839)

* Backport kubernetes-sigs#3908

* Update kubernetes to 1.12.4

Fix ubuntu-contiv test failed (kubernetes-sigs#3808)

netchecker agent status is pending

Fix Bionic networking restart error kubernetes-sigs#3430 (kubernetes-…

…sigs#3431)

bump upgrade tests to v2.5.0 commit (kubernetes-sigs#3087)

Weave limits (kubernetes-sigs#2660)

* Raise limits for weave

* Adjust weave limits