Automated cherry pick of #76039: Finish saving test results on failure

Automated cherry pick of #75855: Disable GCE agent address management on Windows nodes.

Automated cherry pick of #75900: kubeadm: fix "upgrade plan" not working without k8s version

Automated cherry pick of #75847: fix-external-etcd

Automated cherry pick of #75269: gce: configure: validate SA has storage scope

Automated cherry pick of #74919: Fix Windows to read VM UUIDs from serial numbers

Automated cherry pick of #75283 upstream release 1.14

The conformance image should be saving its results
regardless of the results of the tests. However,
with errexit set, when ginkgo gets test failures
it exits 1 which prevents saving the results
for Sonobuoy to pick up.

Fixes: #76036

With this metadata key set, "GCEWindowsAgent: GCE address manager
status: disabled" will appear in the VM's serial port output during
boot.

Tested:
PROJECT=${CLOUDSDK_CORE_PROJECT} KUBE_GCE_ENABLE_IP_ALIASES=true NUM_WINDOWS_NODES=2 NUM_NODES=2 KUBERNETES_NODE_PLATFORM=windows go run ./hack/e2e.go -- --up
cluster/gce/windows/smoke-test.sh

cat > iis.yaml <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: iis
  labels:
    app: iis
spec:
  containers:
  - image: mcr.microsoft.com/windows/servercore/iis
    imagePullPolicy: IfNotPresent
    name: iis-server
    ports:
    - containerPort: 80
      protocol: TCP
  nodeSelector:
    beta.kubernetes.io/os: windows
  tolerations:
  - effect: NoSchedule
    key: node.kubernetes.io/os
    operator: Equal
    value: windows1809
EOF

kubectl create -f iis.yaml
kubectl expose pod iis --type=LoadBalancer --name=iis
kubectl get services
curl http://<service external IP address>

If the k8s version argument passed to "upgrade plan" is missing
the logic should perform the following actions:
- fetch a "stable" version from the internet.
- if that fails, fallback to the local client version.

Currentely the logic fails because the cfg.KubernetesVersion is
defaulted to the version of the existing cluster, which
then causes an early exit without any ugprade suggestions.

See app/cmd/upgrade/common.go::enforceRequirements():
  configutil.FetchInitConfigurationFromCluster(..)

Fix that by passing the explicit user value that can also be "".
This will then make the "offline getter" treat it as an explicit
desired upgrade target.

In the future it might be best to invert this logic:
- if no user k8s version argument is passed - default to the kubeadm
version.
- if labels are passed (e.g. "stable"), fetch a version from the
internet.

If the VM SA doesn't have storage scope associated, don't use the
token in the curl request or the request will fail with 403.

Bump go-openapi/jsonpointer and go-openapi/jsonreference versions

Certain versions of vSphere do not have the same value for product_uuid
and product_serial. This mimics the change in #59519.

Fixes #74888

1.14 release notes fixes for 1.14 branch

xref: #75653
Signed-off-by: Jorge Alarcon Ochoa <alarcj137@gmail.com>

Automated cherry pick of #75529: bump required minimum go version to 1.12.1 (strings pkg compatibility)

Automated cherry pick of #75487: Restore machine readability to the print-join-command output

The output of `kubeadm token create --print-join-command` should be
usable by batch scripts. This issue was pointed out in:

https://github.com/kubernetes/kubeadm/issues/1454

Restore username and password kubectl flags

Mark audit e2e tests as flaky

Move to golang 1.12.1 official image

build/gci: bump CNI version to 0.7.5

fix race condition issue for smb mount on windows

framework k8s.io/apiextensions-apiserver dependency

Clear conntrack entries on 0 -> 1 endpoint transition with externalIPs

Remove reference to USE_RELEASE_NODE_BINARIES.

fix kubeadm init output