Fix/docker upgrade 1.1

[ryane]

• Installs cleanly on a fresh build of most recent master branch
• Upgrades cleanly from the most recent release
• Updates documentation relevant to the changes (n/a)

Fixes #1476

and includes some doc updates

[ryane]

builds failed for various (likely unrelated) reasons.

aws:

TASK: [wait for host boot] **************************************************** 
...
failed: [mantl-ci-793-1-kubeworker-001 -> 127.0.0.1] => {"elapsed": 120, "failed": true}
msg: Timeout when waiting for 54.153.78.211:22`

digitalocean:

TASK: [ensure that hosts are responding] ************************************** 
fatal: [mantl-ci-793-2-worker-002] => SSH Error: Permission denied (publickey,gssapi-keyex,gssapi-with-mic,password).
    while connecting to 159.203.200.211:22
It is sometimes useful to re-run the command using -vvvv, which prints SSH debug output to help diagnose the issue.

gce:

TASK: [kubernetes | run cert generation script] ******************************* 
failed: [mantl-ci-793-3-control-03 -> 127.0.0.1] => {"cmd": "/mantl/.syncdir/make-ca-cert.sh", "failed": true, "rc": 2}
msg: [Errno 2] No such file or directory

ping @sehqlr

otherwise, ready to test. should verify that a 1.0.3 cluster can be upgraded following the upgrade docs: https://github.com/CiscoCloud/mantl/blob/3244df9724d7d2c93cae807d660a7733ecd5c37b/docs/upgrading/index.rst and that new builds haven't been affected.

[sehqlr]

That thing is GCE is a Travis-only bug that I started noticing recently that needs an issue made for it.

[langston-barrett]

I'm testing this manually right now.

[langston-barrett]

Works for me!