Automated cherry pick of #72291: Check for volume-subpaths directory in orpahaned pod

Automated cherry pick of #71834 upstream release 1.13

Automated cherry pick of #72081: Make scheduleinternalcache.PodFilter as public

Automated cherry pick of #71992: fix race condition when attach azure disk in vmss

cherry pick #72135 to 1.13: Surface selected pod RuntimeHandler in Kubelet logs

Automated Cherry Pick of #71581 to release-1.13

Automated cherry pick of #59525: fix node and kubelet start times

Automated cherry pick of #71990: fix kubelet log flushing issue in azure disk

update cloud provider boilerplate

The pull-kubernetes-verify presubmit is failing on
verify-cloudprovider-gce.sh because it is a new year and thus current
test generated code doesn't match the prior committed generated code in
the copyright header.  The verifier is removed in master now, so for
simplicity and rather than fixing the verifier to ignore the header
differences for prior supported branched, this commit is the result of
rerunning hack/update-cloudprovider-gce.sh.
Signed-off-by: Tim Pepper <tpepper@vmware.com>

Automated cherry pick of #72035 and #72084: bump golang to 1.11.4 (CVE-2018-16875)

Automated cherry pick of #72030: Fix race condition when joining nodes

Automated cherry pick of #72123: kubeadm: fix nil check in join config creation

Automated cherry pick of #71945: kubeadm: fixed etcd sync endpoints

fix gofmt issue

Ensure volume mount error checking is done inside the operation so that
failures get handled with exponential backoff, etc.

Despite we were checking for the kubelet kubeconfig file to be present, the
kubelet first writes this file and then the certificates the kubeconfig file
refers to. This represents a race condition in kubeadm in which when we confirm
that the kubelet's kubeconfig file is present we continue creating a clientset
out of it. However, the clientset creation will ensure that the certificates the
kubeconfig file refers to exist on the filesystem.

To fix this problem, not only wait for the kubelet's kubeconfig file to be
present, but also ensure that we can create a clientset ouf of it on our polling
process, while we wait for the kubelet to have performed the TLS bootstrap.

Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>

Automated cherry pick of #71923: diff: Fix overlapping filenames

Automated cherry pick of #71980: Disable proxy to loopback and linklocal

Automated cherry pick of #71755: Allow kube-scheduler to tolerate cluster auth config lookup

Automated cherry pick of #71713, #71857: Plumb token and token file through rest.Config

The filename can overlap when multiple resources have the same name (but
obviously are of a different type). Include the name of the type in the
file name to prevent the overlap.

Automated cherry pick of #71854: apply: fix detection of non-dry-run enabled servers

Automated cherry pick of #71551: activate unschedulable pods only if the node became more