Add upgrade playbook

This is not great because the upgrade must be run manually on the first node and that first node has to be master1, but I'm not sure how to do better without much more complexity.