Recognize newer docker versions without -ce/-ee suffix: 18.09.0

add a metric that can be used to notice stuck worker threads

add readiness gates in kubectl extended output for pods

Improve human-readable output of Deployments and StatefulSets

kubeadm: update the state in app/cmd.go

kubeadm: Adds tests to node patching

Fix e2e conformance test error

Use watch cache when rv=0 even when limit is set

kubeadm: set pod-infra-container-image for the kubelet

Kubeadm graduate addons phase

kubeadm: print the join command

The kubelet allows you to set `--pod-infra-container-image`
(also called `PodSandboxImage` in the kubelet config),
which can be a custom location to the "pause" image in the case
of Docker. Other CRIs are not supported.

Set the CLI flag for the Docker case in flags.go using
WriteKubeletDynamicEnvFile().

Since docker 18.09, the ServerVersion field format changed: the `-ce`
or `-ee` suffix disappeared:

- docker 18.06: `18.06.1-ce`
- docker 18.09: `18.09.0`

This was not expected by the docker_validator version regexp, which
assumed newer docker versions ended with `-[a-z]{2}`.
This made the validator return an error, whereas we expect it to
return only a warning (by recognizing it as a newer but not yet
supported docker version).

This commit relax the version regexp to also recognize `18.09.0`.
The docker validator now returns a warning, as tested.

Signed-off-by: Chuck Ha <ha.chuck@gmail.com>

Signed-off-by: Chuck Ha <ha.chuck@gmail.com>

Remove DynamicKubeletConfig from init and join workflow

add BoundServiceAccountTokenVolume feature

pkg/kubelet/logs: Add container log size metric

Remove DynamicKubeletConfig from init and join workflow, also remove DynamicKubeletConfig feature gate

fix kubeadm upgrade regression

Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>

Update cAdvisor godeps to v0.32.0

Handler error when kubeconfig file not exist on kubeadm reset

kubectl: move custom columns printers and flags

always enable TokenRequest in GCE kube-up.sh

Unexport csr.ParseCSR

This func is only used internally and was copied from
k8s.io/kubernetes/pkg/apis/certificates.

make oidc authenticator (more?) audience aware

kubeadm: Remove AuditPolicyConfiguration

kubectl get: remove internal resource dependency

* require TokenRequest to be enabled and configured
* bind ca.crt publisher to this feature rather than to TokenRequest

fix data race

Part of https://github.com/kubernetes/kubernetes/issues/69893