oc_group doesn't manage the list of users assigned to a group (oc_user does).

so when doing an
oc_group:
  state: present
  name: groupA

on a pre-existing group 'groupA' with already defined users, oc_group would detect a difference an blow away the existing users

fix this by adding 'users' to the list of fields to ignore when determining whether there are object differences

- Add support for annotations in oc_service
- Use oc_service instead of oc_obj
- Use oc_pvc instead of oc_obj
- Work around lack of idempotency for oc_obj DeploymentConfig

Automatic merge from submit-queue.

Adding support for cluster-autoscaler.

This is the kubernetes cluster-autoscaler role.

Features:
- Updated lib_openshift to handle --role-namespace when modifying/creating rolebindings for specific namespaced role objects
- openshift_cluster_autoscaler role to deploy the autoscaler

bring ansible service broker up to date with bearer token changes
etcd -> 0.0.0.0
add auth information to broker resource in catalog
add sandbox role to config
simplify defaults
add labels to oc_route
use new oc_route label field
Fix parameter ordering
add port back
Fix secret syntax

Only validate certificates that are passed to oc_route

adding check to a yaml dump to work properly with new ruamel lib