Pod-level security context proposal

Maintain an IP address independent of the forwarding rule for GCE plus bug fixes

Add a slow e2e test to monitor kubelet resource usage

Add new GCE PD E2E test to verify two PDs attached to one container

DaemonSets adds a Status subresource

MESOS: updated mesos-go and dep libs: zk and gogo/protobuf

MESOS: try not to leave dangling zombie procs when minion controller exits

consolidate a bunch of FakePodControl testclients into a shared one

Refactor KubeProxy to allow mocking of all moving parts.

MESOS: Remove unused Watch code in executor

Allow pre-binding of Persistent Volumes to PVClaims

Fix 'ContainersMap' feature in fake-docker-client.

Add a method for encoding directly to a io.Writer and use it for HTTP

Refactor image manager for client/server implementation of the container runtime

del the unused code

This code was in rough shape, so I've fixed the issues with the original
PR as well as a few other changes:
1. Clarify the error messages related to the "gce Addresses" to make it
   clear we're talking about static IP addresses
2. Fix the bug in the original PR, which was a nil pointer dereference
   from passing op to waitForRegionOp when the address doesn't exist.
3. Rearrange the steps of EnsureTCPLoadBalancerDeleted to be the reverse
   of EnsureCreated, which mostly just seems like good practice to me.
   This is also supported by the following two bugs I found :(
4. Fix an independent bug of returning too early if the target pool
   doesn't exist, effectively stranding the firewall. This was likely
   introduced because target pools used to be the last thing deleted,
   so it was previously safe to return there.
5. Fix an independent bug of not returning an error waiting for the
   target pool to be deleted failed. This was very possibly causing
   target pool leaks in our e2e tests. This was similarly due to
   assuming that the target pool was the last thing deleted in the
   function, then having the firewall deletion stuck in after it.

add pod garbage collection

Healthcheck the kubelet on the secure port rather than the read-only port.

easier auto-conversion, strict compat with deprecatedPublicIPs

Improve conflict errors in namespace controller

simplify group-version-to-pkg-path

Improve message from kubectl config

Fix a race in pod backoff.

Ensure ResourceQuota values are non-negative

Partial fix for issue #14263

Fix error message for non-existent namespace

Remove use of "minion" from graphic

Small fixes in autoscaling e2e utils

Allow enabling deployment controller on GCE and GKE

Another attempt to fix problem with not ready endpoints in autoscalin…

Actually enabled Horizontal Pod Autoscaling tests

Revert "cni network plugin"