Update runner to 1.11.1

Closes #27

See merge request !29

Bump to 8.17.2

See merge request !28

Fix a few typos

See merge request !27

Upgrade GitLab instance to 8.17.0

Closes #23

See merge request !26

Update the container used for GitLab to `gitlab/gitlab-ce:8.17.0-ce.0`

This no longer needs the `fix-git-hooks.patch`, so remove that and all plumbing surrounding it. cc/ @ayufan

Configure Nginx to preserve external IP

Closes #16

See merge request !24

Expand `trusted_proxies` to include all non-routable network blocks per RFC 1918

Update gitignore to exclude all generated YAML

See merge request !25

Replace the static generated yaml file with a pattern `gitlab-*-*.yml` to catch all generated YAML files, as our output pattern is made from the `echo $GITLAB_GKE_DOMAIN | tr . -`, it should alway match.

Update the gitlab deployment with `gitlab_rails['trusted_proxies']`, and add annotation to Nginx service to support preservation of external IPs to internal nodes.

This is now available because of the availability of k8s 1.5.x on GKE, where as it was not previously.

Ignore `.env` file

See merge request !23

Add a gitignore line for a local `.env` environment file.

Point out the Sales Demo

See merge request !22

Update verbage to be clear which script to use when providing demo to customers.

Add URL pointing to the Sales Demo in the handbook

Add port 22 to ingress and load balancer to support git ssh

Closes #4

See merge request !18

Clarify that LEGO_EMAIL must be routable.

See merge request !20

If the email provided for LEGO_EMAIL is not a valid, routable email address, Let's Encrypt ACME me calls will fail, and without error from the `kube-lego` container.

Mesages like the following show that LE is rejecting your requests silently.

```
2017-02-15T17:20:57.441814450Z time="2017-02-15T17:20:57Z" level=info msg="creating new secret" context=secret name=gitlab-tls namespace=gitlab
2017-02-15T17:20:57.444901346Z time="2017-02-15T17:20:57Z" level=error msg="Error while process certificate requests: Secret \"gitlab-tls\" is invalid: [data[tls.crt]: Required value, data[tls.key]: Required value]" context=kubelego
```

generate.bash: code style fixes

See merge request !17

Fix mattermost permissions

Closes #11

See merge request !16

`gitlab-deployment.yml` had the path for `authorized_keys` in the wrong directory, resulting in Omnibus  `chmod`ing `/gitlab-data` to `700`. This fixes that so that `authorized_keys` is in the correct directory, and `/gitlab-data` is correctly set to `701`

Update docs for Prometheus access by DNS.

See merge request !15

Add README note for upgrades

Closes #5

See merge request !13

Add subdomain for Prometheus

See merge request !14

For now, it has proven simple to update the deployment by simply pulling `master`, re-run `generate.bash` and apply with `kubectl apply -f gitlab-{domain}.yml`

Add this to the bottom of the README.md

This may be affected in the future with generating random secrets during `generate.bash` runs as noted by @bbhoss.

Bump GitLab CE container to 8.16.2-ce.0

Closes #10

See merge request !12