Automatic merge from submit-queue.

Automated cherry pick of #63385: fix status subresource

Cherry pick of #63385 on release-1.10.

#63385: fix status subresource

This change make the codes consistent with the document.
Fixes: https://github.com/kubernetes/kubernetes/issues/63359

Automatic merge from submit-queue.

Automated cherry pick of #63504: Improve where we load builds from for kubeadm upgrade jobs

Cherry pick of #63504 on release-1.10.

#63504: Improve where we load builds from for kubeadm upgrade jobs

```release-note
Fixed where we get latest builds for stable branches
```

Automatic merge from submit-queue.

Automated cherry pick of #62669 upstream release 1.10

**What this PR does / why we need it**:
Required to enable CloudKMS integration in 1.10.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```

We should stop special casing "ci-cross" and just use the
configuration in test-infra to dictate where we pick up
the builds from.

For 1.8,1.9,1.10 branches, we need to load the latest
version from ci/latest*.txt.

For master, 1.11 etc, we need to load from ci-cross/latest*.txt.

We need to update test-infra configs if things fail.

try these to verify:
```
gsutil cat gs://kubernetes-release-dev/ci/latest-1.9.txt
gsutil cat gs://kubernetes-release-dev/ci-cross/latest.txt
```

Automatic merge from submit-queue.

Automated cherry pick of #63526: adding support for VM name with extra Separator String

Cherry pick of #63526 on release-1.10.

#63526: adding support for VM name with extra Separator String

Automatic merge from submit-queue.

1.10: Automated cherry pick of #63392

**What this PR does / why we need it**:
Cherry pick of #63392 on release-1.10

Fixes local PV test failure on 1.10 upgrade test
testgrid: https://k8s-testgrid.appspot.com/sig-release-master-upgrade#gke-gci-1.10-gci-master-upgrade-cluster

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #61002: IsNotFound should check ErrDefault404 and

Cherry pick of #61002 on release-1.10.

#61002: IsNotFound should check ErrDefault404 and

PR #62903 changed error string GetMountRefs() returned, which broke test `should fail due to non-existent path`. Remove error string check to fix test.

Related to: #60658 #60976
Refer to:
  https://github.com/gophercloud/gophercloud/pull/103

Automatic merge from submit-queue.

Automated cherry pick of #62462: Add private mount propagation to API.

Cherry pick of #62462 on release-1.10.

#62462: Add private mount propagation to API.

Automatic merge from submit-queue.

Automated cherry pick of #62668: add metrics to cinder

Cherry pick of #62668 on release-1.10.

#62668: add metrics to cinder

Merge pull request #63229 from vikaschoudhary16/automated-cherry-pick-of-#63118-upstream-release-1.10-1524807783

Automatic merge from submit-queue.

cherry pick of #63118: Fix race between stopping old and starting new endpoint

**What this PR does / why we need it**:
Cherry pick of #63118 on release-1.10.
#63118: Fix device plugin re-registration

**Special notes for your reviewer**:

**Release note**:

```release-note
Fix issue where on re-registration of device plugin, `allocatable` was not getting updated. This issue makes devices invisible to the Kubelet if device plugin restarts. Only work-around, if this fix is not there, is to restart the kubelet and then start device plugin.
```
/cc @jiayingz

Automatic merge from submit-queue.

Automated cherry pick of #62303 to release-1.10: Refactor subpath reconstruction tests to use util test

Cherry pick of #62303 to release-1.10: Refactor subpath reconstruction tests to use util test

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #62697

**Special notes for your reviewer**:
I had to do some manual merges because generic-persistent-volumes.go doesn't exist in 1.10.

**Release note**:

```release-note
NONE
```

Automatic merge from submit-queue.

Revert "revert resource disablement, 1.10"

Reverts kubernetes/kubernetes#62116. GKE apiserver is crashing with that change, breaking multiple release blocking test suites.

Automatic merge from submit-queue.

Automated cherry pick of #62655: Modify the kubeadm upgrade DAG for the TLS Upgrade

Cherry pick of #62655 on release-1.10.

#62655: Modify the kubeadm upgrade DAG for the TLS Upgrade

**Release note**:
```release-note
Action Required: kubeadm upgrade no longer supports downgrading 1.10 clusters to 1.9 clusters due to an incompatibility between the kubernetes 1.9 and 1.10 featureGates struct. Please backup /etc/kubernetes/manifests, the etcd database, and the kubeadm-config configmap if you anticipate a need to rollback.
```

Automatic merge from submit-queue.

Automated cherry pick of #61911 upstream release 1.10

**What this PR does / why we need it:**
PR addresses two issues:
1. Update Istio addon version to latest stable 0.6.0 (required for e2e test integration).
2. Mirror images in gcr.io for security scanning, since this is an addon.

Fixes #61910 

**Release note**:
```release-note
Update version of Istio addon from 0.5.1 to 0.6.0.
```

Automatic merge from submit-queue.

Automated cherry pick of #63067: Removed e2e test on empty NodeAffinity.

Cherry pick of #63067 on release-1.10.

#63067: Removed e2e test on empty NodeAffinity.

Automatic merge from submit-queue.

Automated cherry pick of #62464: avoid dobule RLock() in cpumanager

Cherry pick of #62464 on release-1.10.

#62464: avoid dobule RLock() in cpumanager

Signed-off-by: Da K. Ma <klaus1982.cn@gmail.com>

Signed-off-by: Da K. Ma <klaus1982.cn@gmail.com>

Automatic merge from submit-queue.

Automated cherry pick of #62919: Fix vSphere Cloud Provider to handle upgrade from k8s version less than v1.9.4 to v1.9.4+

Cherry pick of #62919 on release-1.10.

#62919: Fix vSphere Cloud Provider to handle upgrade from k8s version less than v1.9.4 to v1.9.4+

```release-note
Fix in vSphere Cloud Provider to handle upgrades from kubernetes version less than v1.9.4 to v1.9.4 and above.
```

Automatic merge from submit-queue.

Automated cherry pick of #63000: Remove METADATA_AGENT_VERSION config option

Cherry pick of #63000 on release-1.10.

#63000: Remove METADATA_AGENT_VERSION config option

Automatic merge from submit-queue.

Automated cherry pick of #62220: Fix detach disk when VM is not found 

Cherry pick of #62220 on release-1.10.

#62220: Fix detach disk when VM is not found 

```release-note
Fix in vSphere Cloud Provider to report disk is detach when VM is not found.
```

Automatic merge from submit-queue.

Automated cherry pick of #61560: test: Disable ui dashboard test for gke

Cherry pick of #61560 on release-1.10.

#61560: test: Disable ui dashboard test for gke

Automatic merge from submit-queue.

revert resource disablement, 1.10

This is not an automated pick!

An attempt to revert for https://github.com/kubernetes/kubernetes/issues/62044.  It is not clean.


```release-note
Restores ability to enable/disable resource within an API GroupVersion individually.
```

Fix `rollbackEtcdData()` to return error=nil on success
`rollbackEtcdData()` used to always return an error making the rest of the
upgrade code completely unreachable.

Ignore errors from `rollbackOldManifests()` during the rollback since it
always returns an error.
Success of the rollback is gated with etcd L7 healthchecks.

Remove logic implying the etcd manifest should be rolled back when
`upgradeComponent()` fails

- Adds L7 check for kubeadm etcd static pod upgrade

- Calculate `beforePodHashMap` before the etcd upgrade in anticipation of KubeAPIServer downtime
- Detect if pre-upgrade etcd static pod cluster `HasTLS()==false` to switch on the Etcd TLS Upgrade
if TLS Upgrade:
  - Skip L7 Etcd check (could implement a waiter for this)
  - Skip data rollback on etcd upgrade failure due to lack of L7 check (APIServer is already down unable to serve new requests)
  - On APIServer upgrade failure, also rollback the etcd manifest to maintain protocol compatibility

- Add logging

- Test HasTLS()
- Instrument throughout upgrade plan and apply
- Update plan_test and apply_test to use new fake Cluster interfaces
- Add descriptions to upgrade range test
- Support KubernetesDir and EtcdDataDir in upgrade tests
- Cover etcdUpgrade in upgrade tests
- Cover upcoming TLSUpgrade in upgrade tests