Additionally, ensure that every staging repo has a BUILD file at its
root.

Also, remove a gazelle directive we no longer need.

Fix typos

Ignore the sticky setgid bit when a test is running on memory EmptyDir

kubeadm cleanup: master -> control-plane (cont.4)

Fix shellcheck lint errors in cluster and hack scripts

kubelet: upgrade sourceFile to use fsnotify

Disable Windows Defender on Windows nodes.

Fix some shellcheck failures in hack

Register openstack provider for e2e test

Fix shellcheck for hack/verify-generated-*

Add readonly volume tests for windows

Update vendor prometheus/common/... to latest release

Remove unused GetDefaultBackendNodePort()

fix shellcheck in cluster/juju

fix shellcheck in cluster/local

annotate errors in apps/job e2e tests

Refactor etcd client function have same signatures in etcd.go

Refactor most of `kubectl drain` as a library

Signed-off-by: PingWang <wang.ping5@zte.com.cn>

- structured pod filter functions
- naming improvements
  - consistent use of daemonSets and DaemonSets
  - rename field to reflect its usage
- new cordon/uncordon helper
  - use Core API client direcly instead of generic CLI runtime

All of the `hack/verify-generated-*` files now pass shellcheck and are
removed from `hack/.shellcheck_failures`.

While running unit tests for perf on a Kube cluster with a memory backed
emptydir as TMPDIR, TestSafeMakeDir failed with:

```
--- FAIL: TestSafeMakeDir (0.01s)
	mount_linux_test.go:661: test "directory-exists": expected permissions 20000000750, got 20020000750
```

(TMPDIR set to /tmp/volume, /tmp/volume is EmptyDir with type Memory)

The test doesn't actually care about `os.ModeSetgid`, so specifically mask it out when testing this way.

Move kubelet cert generation when starting kubelet

bazel: create genrules to produce debs and RPMs without arch-specific names

kubeadm: fix issue with missing kubeproxy fields in test data

make more of the shell pass lints

fix shellcheck in hack/...

kubeadm: fix url validation code