Automated cherry pick of #72965: Use actual node hostname during test "EmptyDir Wrapper

Automated cherry pick of #73293: Add updateStrategy section for nodelocaldns

Automated cherry pick of #73326: Update to go1.11.5

Automated cherry pick of #71911: Only handle addresses of the own ip family

Automated cherry pick of #72558: add goroutine to move unschedulablepods to activeq regularly 1.13

Automated cherry pick of #73097 upstream release 1.13

Automated cherry pick of #73239: Add back --cert-dir option for init phase certs sa

nodelocaldns needs to use the same iptables lock file to avoid
contention with other entities modifying iptables rules.

Automated cherry pick of #73268 upstream release 1.13 

Disable TaintNodesByCondition in node e2e tests, because node lifecycle controller does not run in the tests

Automated cherry pick of #72984: kubeadm: wait for the etcd cluster to be available when

When the etcd cluster grows we need to explicitly wait for it to be
available. This ensures that we are not implicitly doing this in
following steps when they try to access the apiserver.

Automated cherry pick of #72895 upstream release 1.13

Automated cherry pick of #68422: Fix AWS NLB security group updates

Automated cherry pick of #72053 upstream release 1.13

kubernetes/kubernetes#60825

This corrects a problem where valid security group ports were removed
unintentionally when updating a service or when node changes occur.

Fixes #60825, #64148