* Use the upstream etcd image packaged with the required metadata to be usable as a system container (runc) under systemd
* Several known hacks and broken areas * Download v1.10 Kubelet from release tarball * Install flannel CNI binaries to /opt/cni * Switch SELinux to Permissive * Disable firewalld service * port-forward won't work, socat missing