Until we port the remaining e2e tests to use exec host pods instead
of SSH, it should be possible to use bastion host when
clusters don't expose public IPs for nodes. Testers can use the
KUBE_SSH_BASTION environment variable set to a `host:port` to
specify the host that the tests will use as a jump host.

If KUBE_SSH_BASTION is specified, the test will first connect to
the bastion using SSH and the provider private key, then establish
a tunnel from the bastion to the target node by its IP. If the
node has an external IP, the external IP must be routable from the
bastion.

Support KUBE_SSH_KEY_PATH as a single environment variable that if
specified ignores the provider specific settinsg and loads the
SSH private key from the provided path. Makes it much easier to
specify a consistent signer across providers.

Code movement only.

Remove Sysctls feature gate from validation

Fix Referencing non existing var in e2e_node/conformance/run_test.sh

Merge pull request #72727 from bart0sh/PR0057-kubeadm-selfhosting-pivot-controller-manager-add-front-proxy-ca

kubeadm: add front-proxy CA certificate to selfhosting controller-manager

e2e/auth: fix NodeAuthenticator tests not working

int tests: stop special casing KUBE_TEST_ARGS

Remove container type from kubelet runtime labels

SupportPodPidsLimit feature beta with tests

No need to pass GOFLAGS to $goflags variables with go 1.11

Perfect some logs description

Sig windows tests

Move users of `factory.NewConfigFactory` to `scheduler.New`

delete as much content from a namespace as possible

Stop special casing KUBE_TEST_ARGS and limiting the API
group/version settings to "v1" when running the tests. This was
helpful in the past when we used to test multiple values for
KUBE_TEST_API_VERSIONS - if you were specifying KUBE_TEST_ARGS to run a
single test case, you probably didn't want to have it tested for
multiple values of KUBE_TEST_API_VERSIONS.

Now, however, KUBE_TEST_API_VERSIONS comes from
KUBE_AVAILABLE_GROUP_VERSIONS by default, which is a single list instead
of multiple, so we shouldn't need to special case KUBE_TEST_ARGS any
more. This is especially necessary because certain tests that are using
testapi break if KUBE_TEST_API_VERSIONS is just "v1".
Signed-off-by: Andy Goldstein <goldsteina@vmware.com>

Fixing Update Function in FakeCustomStore

Fix typo

fix some typos

Move PodShareProcessNamespace feature gate out of validation

Expose kms timeout value via encryption config.

Selfhosting pivoting fails when using --store-certs-in-secrets
as controller-manager fails to start because of missing front-proxy CA
certificate:
    unable to load client CA file: unable to load client CA file: open
    /etc/kubernetes/pki/front-proxy-ca.crt: no such file or directory

Added required certificate to fix this.

This should fix kubernetes/kubeadm#1281

Change-Id: I16b9061c07f4a43aff9fe236892128af8697a0b4

Change `getBinderFunc` from method to function

Move PodReadinessGates feature gate out of validation

bazel: refactor openapi-gen logic for new kazel

Moving PersistentLocalVolumes feature gate check from validation

Move VolumeSnapshotDataSource feature gate check from validation

Move getNextPod to closure

Diff between PULL_BASE_SHA and HEAD when detecting file changes from Prow

68907 added the slow spec threshold option to ginkgo

Aesthetic changes and fix typo

Device plugins: fix e2e test