Add etcd backed storage

This explicitly adds struct tags for etcd storage instead of implicitly
depends on yaml/json config serialization.

This adds references to etcd storage, including:
- only supports etcd v3
- list of options and their meanings when connecting to etcd cluster

This patch uses docker to run an etcd container in travis CI so we can
run storage/etcd conformance tests.

Add tectonic-ldap matching rule to ldap icon.

Add tectonic-ldap matching rule to ldap icon. Fixes an issue where the ldap icon was missing in the tectonic console.

*: run kubernetes tests in travis

This change vendors github.com/coreos/etcd related packages to support
etcd storage implementation.

This patch adds etcd storage implementation. This should be useful in
environments where
- we dont want to depends on a separate, hard to maintain SQL cluster
- we dont want to incur the overhead of talking to kubernetes apiservers
- kubernetes is not available yet, or if kubernetes depends on dex
to perform authentication and the operator would like to remove any
circular dependency if possible.

connector/oidc: remove test that talks to the internet

connector: implement LinkedIn connector

The previous test doesnt actually testing ListConnectors code. For
example the following pseudocode will pass the test:

```
ListConnectors() { return nil, nil }
```

Instead change to actually fetch and compare list of connectors,
ordering by name

Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>

Do Refresh() by querying user's profile data.

Since LinkedIn doesn't provide refresh tokens at all, and the access
tokens have 60 days expiration, refresh tokens issued by Dex will fail
to update after 60 days.
Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>

connector/linkedin implements authorization strategy via LinkedIn's
OAuth2 endpoint + profile API.

It doesn't implement RefreshConnector as LinkedIn doesn't provide any
refresh token at all (https://developer.linkedin.com/docs/oauth2, Step 5
— Refresh your Access Tokens) and recommends ordinary AuthCode exchange
flow when token refresh is required.
Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>

authproxy.md: strip X-Remote-User

authproxy: update docs and set a userID

follow-up for https://github.com/coreos/dex/pull/1100

Implement the “external” connector (for Apache2 mod_auth etc.)

connector/ldap: add test for InsecureSkipVerify option

tests: add ids to elements for testing automation

travis.yml: bump golang version

connector/gitlab: Fix regexp in Link parser

fixes typo: s/suppied/supplied/

Cross clients improvement - requesting client ID always added to the audience claim

add client request timeout

storage/kubernetes: Log before registering custom resources

Logging before attempting to make any connection to Kubernetes is useful when the connection hangs and dex is killed before it can log any errors.

Add Documentation about customresourcedefinitions creation role