Update kube-dns to Version 1.14.9. Major changes: - Fix for kube-dns returns NXDOMAIN when not yet synced with apiserver. - Don't generate empty record for externalName service. - Add validation for upstreamNameserver port. - Update go version to 1.9.3.

Automatic merge from submit-queue.

[1.10] Automated cherry pick of #61371: Add more subpath e2e tests

Cherry pick of #61371 on release-1.10.

#61371: Add more subpath e2e tests

Automatic merge from submit-queue.

Automated cherry pick of #61394: Remove 'system' prefix from Metadata Agent rbac configuration

Cherry pick of #61394 on release-1.10.

#61394: Remove 'system' prefix from Metadata Agent rbac configuration

**Release note**:
```release-note
Remove 'system' prefix from Metadata Agent rbac configuration
```

Automatic merge from submit-queue.

Automated cherry pick of #61531: Ensure cloudprovider.InstanceNotFound is reported when the VM is not found on Azure

Cherry pick of #61531 on release-1.10.

#61531: Ensure cloudprovider.InstanceNotFound is reported when the VM is not found on Azure

Automatic merge from submit-queue.

Automated cherry pick of #61808: Ensure -o yaml populates kind/apiVersion

Cherry pick of #61808 on release-1.10.

#61808: Ensure -o yaml populates kind/apiVersion

Automatic merge from submit-queue.

Automated cherry pick of #61396: Bump Heapster to v1.5.2

Cherry pick of #61396 on release-1.10.

#61396: Bump Heapster to v1.5.2

**Release note**:
```release-note
Bump Heapster to v1.5.2
```

Automatic merge from submit-queue.

Automated cherry pick of #61235: Support new NODE_OS_DISTRIBUTION 'custom' on GCE

Cherry pick of #61235 on release-1.10.

#61235: Support new NODE_OS_DISTRIBUTION 'custom' on GCE

Automatic merge from submit-queue.

Automated cherry pick of #61480: Use O_PATH to avoid errors on Openat

Cherry pick of #61480 on release-1.10.

#61480: Use O_PATH to avoid errors on Openat

Automatic merge from submit-queue.

Automated cherry pick of #61727: Update event-exporter image

Cherry pick of #61727 on release-1.10.

#61727: Update event-exporter image

```release-note
[fluentd-gcp addon] Update event-exporter image to have the latest base image.
```

Signed-off-by: Mik Vyatskov <vmik@google.com>

Also add tests for sockets and fifos
Replace use of syscall for flags with unix

Automatic merge from submit-queue.

[1.10] Automated cherry pick of #61373: Use inner volume name instead of outer volume name for subpath directory

Cherry pick of #61373 on release-1.10.

#61373: Use inner volume name instead of outer volume name for subpath directory

**Release note**:

```release-note
ACTION REQUIRED: In-place node upgrades to this release from versions 1.7.14, 1.8.9, and 1.9.4 are not supported if using subpath volumes with PVCs.  Such pods should be drained from the node first.
```

Automatic merge from submit-queue.

Automated cherry pick of #61561: Cluster Autoscaler 1.2.0

Cherry pick of #61561 on release-1.10.

#61561: Cluster Autoscaler 1.2.0

Automatic merge from submit-queue.

Automated cherry pick of #61504: Fix `PodScheduled` bug for static pod.

Cherry pick of #61504 on release-1.10.

#61504: Fix `PodScheduled` bug for static pod.

Signed-off-by: Lantao Liu <lantaol@google.com>

Automatic merge from submit-queue.

Automated cherry pick of #61411: disable DaemonSet scheduling feature for 1.10

Cherry pick of #61411 on release-1.10.

related to https://github.com/kubernetes/kubernetes/issues/61050

#61411: disable DaemonSet scheduling feature for 1.10

```release-note
DaemonSet scheduling associated with the alpha ScheduleDaemonSetPods feature flag has been removed from the 1.10 release. See https://github.com/kubernetes/features/issues/548 for feature status.
```

Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Updates kubeadm default to use 1.10

**What this PR does / why we need it**:
In line with https://github.com/kubernetes/kubeadm/blob/master/docs/release-cycle.md, the default branch for kubeadm to deploy should be bumped right before the rc.1.
This can even be manually merged by the someone from the release team.

**Which issue(s) this PR fixes** :
Fixes #60608 

**Special notes for your reviewer**:

**Release note**:

```
Updates default deployment for kubeadm to 1.10 
```

/cc @kubernetes/sig-cluster-lifecycle-pr-reviews @kubernetes/sig-release-members  @dims @jberkus @jdumars

Merge remote-tracking branch 'origin/master' into release-1.10.  Deleting CHANGELOG-1.7.md CHANGELOG-1.8.md CHANGELOG-1.9.md

Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Added network-unavailable tolerations when hostNetwork=true.
Signed-off-by: Da K. Ma <klaus1982.cn@gmail.com>

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #61050 

**Release note**:
```release-note
None
```

Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Patch glbc manifest to use version 1.0.0. Also add rate limiting flags

Will also add a release note to the 1.10 google doc as well.

Fixes: #61305

/assign @bowei 
/cc @nicksardo 

Release Note:
```release-note
Bump ingress-gce image in glbc.manifest to 1.0.0
```

Signed-off-by: Da K. Ma <klaus1982.cn@gmail.com>

Automatic merge from submit-queue (batch tested with PRs 61351, 61294). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Fix cpu cfs quota flag with pod cgroups

**What this PR does / why we need it**:
It fixes the cpu-cfs-quota flag in the kubelet when pod cgroups are enabled.

**Which issue(s) this PR fixes** 
Fixes #61293

**Special notes for your reviewer**:
This is a regression reported by some of our users that disable cpu quota enforcement.

**Release note**:
```release-note
Fix regression where kubelet --cpu-cfs-quota flag did not work when --cgroups-per-qos was enabled
```

Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Wait for only enough no. of RC replicas to be running in testutil

Fix https://github.com/kubernetes/kubernetes/issues/61189

/sig scalability
/kind bug
/priority important-soon
/cc @wojtek-t 

```release-note
NONE
```