Updated Canal manifest to v3.5.0 for k8s v1.12+

[KashifSaadat]

Notable Changes:

• Calico v3.5.0
• Flannel v0.11.0
• Calico images are now pulled from Docker Hub rather than Quay
• The CNI plugin is now installed using a Kubernetes init container rather than a long-lived sidecar
• You can now provide disableFlannelForwardRules in the Canal networking spec to configure Flannel to not add the default ACCEPT rules to the iptables forward chain (fixes Canal on K8s v1.8 with chain append mode no longer respects networkpolicies #4037)

Calico release notes:

• https://docs.projectcalico.org/v3.5/releases/
• https://docs.projectcalico.org/v3.4/releases/

I have kept the roles / bindings resource names in line with previous updates (they are different in the upstream examples provided on the projectcalico website), because during a rolling-upgrade it causes issues where the roleRef cannot be changed without recreating the resource.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: KashifSaadat

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [KashifSaadat]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[KashifSaadat]

(BEFORE) Cluster NetworkingSpec:

  networking:
    canal:
      chainInsertMode: append

# iptables -nL FORWARD
Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
KUBE-FORWARD  all  --  0.0.0.0/0            0.0.0.0/0            /* kubernetes forwarding rules */
ACCEPT     all  --  10.10.0.0/16         0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            10.10.0.0/16
cali-FORWARD  all  --  0.0.0.0/0            0.0.0.0/0            /* cali:wUHhoiAYhphO9Mso */

(AFTER) Cluster NetworkingSpec:

  networking:
    canal:
      chainInsertMode: append
      disableFlannelForwardRules: true

# iptables -nL FORWARD
Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
KUBE-FORWARD  all  --  0.0.0.0/0            0.0.0.0/0            /* kubernetes forwarding rules */
cali-FORWARD  all  --  0.0.0.0/0            0.0.0.0/0            /* cali:wUHhoiAYhphO9Mso */

[KashifSaadat]

/assign @gambol99 @justinsb

[chrisz100]

/retest
/lgtm

[KashifSaadat]

/test pull-kops-e2e-kubernetes-aws