Automatic merge from submit-queue

Fix various typos in pkg/api

Just fixed some typos + "englishify" in pkg/api

Automatic merge from submit-queue

Move several tests to the slow suite.

https://k8s-testgrid.appspot.com/google-gce#gce&width=5&graph-metrics=test-duration-minutes

ref https://github.com/kubernetes/contrib/issues/1522

Automatic merge from submit-queue

Bump addon-resizer version in heapster

Ref #31105

Automatic merge from submit-queue

ClientConfig should not default to http://localhost:8080

This changes clientcmd to skip the default cluster, but preserves the
behavior in kubectl. This prevents the possibility of an administrator
misconfiguration in kubelet or other server component from allowing a
third party who can bind to 8080 on that host from potentially
impersonating an API server and gaining root access.

@mikedanese @deads2k this removes the defaulting of http://localhost:8080 for server from everything except kubectl.



```release-note
Kubernetes server components using `kubeconfig` files no longer default to `http://localhost:8080`.  Administrators must specify a server value in their kubeconfig files.
```

Automatic merge from submit-queue

Make kubeletConfiguration field on Kubelet struct a value type

Automatic merge from submit-queue

I'm not a rackspace or kubernetes user any more

Automatic merge from submit-queue

increase latency and resource limit accroding to test results

This PR increases the latency limit of node e2e density test according to previous test results.

Fixed #30878

Automatic merge from submit-queue

Events in federated namespace controller

@quinton-hoole @nikhiljindal @wojtek-t @kubernetes/sig-cluster-federation

Automatic merge from submit-queue

Fix running e2e against local cluster

required env vars were not being set.

/cc @pmorie

Automatic merge from submit-queue

add names for workqueues to gather controller latency/depth metrics

Adding names to the workqueues used by controllers allows the automatic collection of depth, rate, and latency metrics for those controllers.  These are useful for diagnosing various "slow controller" cases.

@kubernetes/rh-cluster-infra

Automatic merge from submit-queue

Remove unused argument to NodeController.Run

@pwittrock - can this go into 1.4? It's zero risk and reduces possible confusion.

This changes clientcmd to skip the default cluster, but preserves the
behavior in kubectl. This prevents the possibility of an administrator
misconfiguration in kubelet or other server component from allowing a
third party who can bind to 8080 on that host from potentially
impersonating an API server and gaining root access.

Automatic merge from submit-queue

Marked HA master feature experimental.

Marked HA master feature experimental.

Automatic merge from submit-queue

e2e: log wget output on CheckConnectivityToHost error

Log output might help to diagnose e2e flakes, whether they are caused by dns issues or connection timeouts.

Might help with flake https://github.com/kubernetes/kubernetes/issues/28188.

Automatic merge from submit-queue

Add a multi-platform proposal

This is a proposal for the work I've done with multiarch Kubernetes. I've worked quite a lot on it and now I've written it down so others may easily use and learn from it, while at the same time pointing out issues that we should fix in the future.

I would like to get this in before `v1.3`.

Feel free to comment on it if it's something that's unclear.

@david-mcmahon @ixdy @mikedanese @Pensu @davidopp @bgrant0607 @dlorenc @eparis @vishh @thockin @dchen1107 @lavalamp

Automatic merge from submit-queue

keep docker0 with private cidr range

fixes: #31465

Keep docker0 when using kubenet on GCI. Assign 169.254.123.1/24 to docker0 to avoid cidr conflict.

Automatic merge from submit-queue

Update influxdb to 0.12

fix #27630 

```release-note
Update influxdb to 0.12
```

Automatic merge from submit-queue

OnError callback function for federated updater

The handler can be useful for precise logging and events recording. Update returns just a single, first received error.

cc: @quinton-hoole @wojtek-t @kubernetes/sig-cluster-federation

Automatic merge from submit-queue

Node E2E: Move the image and host related logic to be remote run specific.

This PR addresses #31597, and better fixes #31588.

With this PR:
1) All remote logic is moved into remote mode.
2) All gci related logic is only called when `HOSTS` and `IMAGES` are not specified.
3) Run node e2e against other node e2e images will work again - `make test-e2e-node REMOET=true IMAGES=e2e-node-containervm-v20160321-image`.
4) List images will work again - `make test-e2e-node REMOTE=true LIST_IMAGES=true`.

Mark 1.4, because https://github.com/kubernetes/kubernetes/pull/31588 is marked as 1.4. And this makes the node e2e work as is described in the [doc ](https://github.com/kubernetes/kubernetes/blob/master/docs/devel/e2e-node-tests.md#run-tests-using-different-images).

@yujuhong @vishh 
/cc @kubernetes/sig-node

Signed-off-by: Thom May <thom@may.lt>

Automatic merge from submit-queue

Fix make test-integration under OSX

Just throw in a doc.go so there's something compilable in the
test/integration/metrics directory.

Fixes #31587

Automatic merge from submit-queue

AppArmor was flipped to beta, update feature gate

/cc @dchen1107

---

1.4 Justification:

- Risk: Low. Change is small & contained.
- Rollback: Nothing else should touch this code path or depend on its functionality.
- Cost: AppArmor is beta, but the feature gate thinks it's alpha.

Marked HA master feautre experimental.

Automatic merge from submit-queue

Fix build on Mac

Use portable `ln -snf` instead of `-sTf` (introduced in https://github.com/kubernetes/kubernetes/pull/31525).

Automatic merge from submit-queue

Tune kubemark-5 resource constraints

Ref. #31105

Automatic merge from submit-queue

Include security options in the container created event

New container creation events look like:
```
Created container with docker id /k8s_bar2.a4; Security:[seccomp=sub/subtest(md5:07c9bcb4db631f7ca191d6e0bca49f76)]

Created container with docker id /k8s_bar2.a4; Security:[seccomp=unconfined apparmor=foo-profile]
```

The goal is to provide enough information to confirm that the requseted security constraints were honored.

For https://github.com/kubernetes/kubernetes/issues/31284

/cc @dchen1107 @thockin @jfrazelle @pweil- @pmorie

---

Justification for v1.4:

- Risk: low. This appends some additional information to a human readable message. A bug here would probably not break any functionality
- Roll-back: I don't anticipate any more changes to this area of the code. No functionality depends on this change.
- Cost of not including: Users don't get any (positive) confirmation that the AppArmor or Seccomp profile they requested were actually enabled.

Automatic merge from submit-queue

Cleanup node failure message

Fix missing newline

Automatic merge from submit-queue

Capitalize feature name in test for dynamic kubelet configuration

Automatic merge from submit-queue

AWS: Fix unbound SSH_CIDR

**What this PR does / why we need it**: Fixes "unbound `SSH_CIDR` errors in e2e

**Which issue this PR fixes** fixes code in #27061

**Special notes for your reviewer**: Not tested, I'm still OOO

Another e2e bug, this one injected by https://github.com/kubernetes/kubernetes/pull/27061

Automatic merge from submit-queue

test/node-e2e: Update CoreOS update disabling

Previously in this saga... #25004

This disables update-engine and locksmithd with ignition instead of
cloud-init so that they're really totally 100% disabled. Our ignition guy promises.

Pretty much every way of disabling them with cloud-init is mildly racy.

Fixes #31633 

I think @vishh can say "I told you so" after the comment on https://github.com/kubernetes/kubernetes/pull/30023#discussion-diff-73431324 .. he was right, but it turns out "stop" there doesn't really work either because of the mess that is cloud-init. Fortunately, converting our cloud-init to json and calling it "ignition" works quite well 😄 

Testing done: I ssh'd in and verified that yes, they're disabled. I didn't wait on the e2e tests to pass, so we'll let this PR check that.

Automatic merge from submit-queue

Add e2e tests for Federated Ingress

This is e2e code for federation ingress controller.
Based util functions, add federation ingress e2e cases(reuse current k8s ones) and add logic to validate the result.