Automatic merge from submit-queue.

Automated cherry pick of #62018: remove IsAbs validation on local volume

Cherry pick of #62018 on release-1.10.

#62018: remove IsAbs validation on local volume

Automatic merge from submit-queue.

[1.10] Automated cherry pick of #63045: passthrough readOnly to subpath

cherry pick of #63045: passthrough readOnly to subpath

**Release note**:

```release-note
Fixes issue where subpath readOnly mounts failed
```

Automatic merge from submit-queue.

Backport MAX_PODS_PER_NODE env from #63114 to 1.10

**What this PR does / why we need it**:
Backport `MAX_PODS_PER_NODE` env changes from #63114 to 1.10. This allows GCE/GKE users to explicitly set default limits on how many pods a node can have for the nodes in this cluster.

**Special notes for your reviewer**:
/assign @bowei 

**Release note**:

```release-note
Add MAX_PODS_PER_NODE env so that GCE/GKE user can use it to specify the default max pods per node for the cluster. IP_ALIAS_SIZE will be changed accordingly. Must have ip alias enabled.
```

Automatic merge from submit-queue.

Automated cherry pick of #63761: Avoid copying aggregated admin/edit/view roles during

Cherry pick of #63761 on release-1.10.

#63761: Avoid copying aggregated admin/edit/view roles during

Automatic merge from submit-queue.

Fix Deployment e2e on master upgrade (62703)

**What this PR does / why we need it**:
Selector and label mutation for RSs created by Deploys has been deprecated, but the e2e in this version still checks for it. We need to remove these checks in order for master upgrade validation to pass.

Fixes #62703

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #62621: Show deprecated kube-apiserver flags

Cherry pick of #62621 on release-1.10.

#62621: Show deprecated kube-apiserver flags

```release-note
Show help for deprecated kube-apiserver flags
```

Automatic merge from submit-queue.

Automated cherry pick of #63535: Bump Heapster to v1.5.3

Cherry pick of #63535 on release-1.10.

#63535: Bump Heapster to v1.5.3

Automatic merge from submit-queue.

Automated cherry pick of #61965: Fix dockershim CreateContainer error handling.

Cherry pick of #61965 on release-1.10.

#61965: Fix dockershim CreateContainer error handling.

```release-note
Fix dockershim CreateContainer error handling
```

Automatic merge from submit-queue.

Check successfully assigned event message for both 1.10 and 1.11.
Signed-off-by: Da K. Ma <klaus1982.cn@gmail.com>

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #62704 

**Release note**:
```release-note
None
```

Automatic merge from submit-queue.

Automated cherry pick of #63385: fix status subresource

Cherry pick of #63385 on release-1.10.

#63385: fix status subresource

Remove check for hash label and selector mutation. This is deprecated in future releases and breaks upgrade tests.

Signed-off-by: Da K. Ma <klaus1982.cn@gmail.com>

This change make the codes consistent with the document.
Fixes: https://github.com/kubernetes/kubernetes/issues/63359

Automatic merge from submit-queue.

Automated cherry pick of #63504: Improve where we load builds from for kubeadm upgrade jobs

Cherry pick of #63504 on release-1.10.

#63504: Improve where we load builds from for kubeadm upgrade jobs

```release-note
Fixed where we get latest builds for stable branches
```

Automatic merge from submit-queue.

Automated cherry pick of #62669 upstream release 1.10

**What this PR does / why we need it**:
Required to enable CloudKMS integration in 1.10.
**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```

We should stop special casing "ci-cross" and just use the
configuration in test-infra to dictate where we pick up
the builds from.

For 1.8,1.9,1.10 branches, we need to load the latest
version from ci/latest*.txt.

For master, 1.11 etc, we need to load from ci-cross/latest*.txt.

We need to update test-infra configs if things fail.

try these to verify:
```
gsutil cat gs://kubernetes-release-dev/ci/latest-1.9.txt
gsutil cat gs://kubernetes-release-dev/ci-cross/latest.txt
```

Automatic merge from submit-queue.

Automated cherry pick of #63526: adding support for VM name with extra Separator String

Cherry pick of #63526 on release-1.10.

#63526: adding support for VM name with extra Separator String

Automatic merge from submit-queue.

1.10: Automated cherry pick of #63392

**What this PR does / why we need it**:
Cherry pick of #63392 on release-1.10

Fixes local PV test failure on 1.10 upgrade test
testgrid: https://k8s-testgrid.appspot.com/sig-release-master-upgrade#gke-gci-1.10-gci-master-upgrade-cluster

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #61002: IsNotFound should check ErrDefault404 and

Cherry pick of #61002 on release-1.10.

#61002: IsNotFound should check ErrDefault404 and

PR #62903 changed error string GetMountRefs() returned, which broke test `should fail due to non-existent path`. Remove error string check to fix test.

Signed-off-by: Lantao Liu <lantaol@google.com>

Related to: #60658 #60976
Refer to:
  https://github.com/gophercloud/gophercloud/pull/103

Automatic merge from submit-queue.

Automated cherry pick of #62462: Add private mount propagation to API.

Cherry pick of #62462 on release-1.10.

#62462: Add private mount propagation to API.

Automatic merge from submit-queue.

Automated cherry pick of #62668: add metrics to cinder

Cherry pick of #62668 on release-1.10.

#62668: add metrics to cinder

Merge pull request #63229 from vikaschoudhary16/automated-cherry-pick-of-#63118-upstream-release-1.10-1524807783

Automatic merge from submit-queue.

cherry pick of #63118: Fix race between stopping old and starting new endpoint

**What this PR does / why we need it**:
Cherry pick of #63118 on release-1.10.
#63118: Fix device plugin re-registration

**Special notes for your reviewer**:

**Release note**:

```release-note
Fix issue where on re-registration of device plugin, `allocatable` was not getting updated. This issue makes devices invisible to the Kubelet if device plugin restarts. Only work-around, if this fix is not there, is to restart the kubelet and then start device plugin.
```
/cc @jiayingz

Automatic merge from submit-queue.

Automated cherry pick of #62303 to release-1.10: Refactor subpath reconstruction tests to use util test

Cherry pick of #62303 to release-1.10: Refactor subpath reconstruction tests to use util test

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #62697

**Special notes for your reviewer**:
I had to do some manual merges because generic-persistent-volumes.go doesn't exist in 1.10.

**Release note**:

```release-note
NONE
```

Automatic merge from submit-queue.

Revert "revert resource disablement, 1.10"

Reverts kubernetes/kubernetes#62116. GKE apiserver is crashing with that change, breaking multiple release blocking test suites.

Automatic merge from submit-queue.

Automated cherry pick of #62655: Modify the kubeadm upgrade DAG for the TLS Upgrade

Cherry pick of #62655 on release-1.10.

#62655: Modify the kubeadm upgrade DAG for the TLS Upgrade

**Release note**:
```release-note
Action Required: kubeadm upgrade no longer supports downgrading 1.10 clusters to 1.9 clusters due to an incompatibility between the kubernetes 1.9 and 1.10 featureGates struct. Please backup /etc/kubernetes/manifests, the etcd database, and the kubeadm-config configmap if you anticipate a need to rollback.
```

Automatic merge from submit-queue.

Automated cherry pick of #61911 upstream release 1.10

**What this PR does / why we need it:**
PR addresses two issues:
1. Update Istio addon version to latest stable 0.6.0 (required for e2e test integration).
2. Mirror images in gcr.io for security scanning, since this is an addon.

Fixes #61910 

**Release note**:
```release-note
Update version of Istio addon from 0.5.1 to 0.6.0.
```