Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>

This is a hacky POC; we need to implement rootless PCM in the proper way.
Especially, pcm.Exists(existingPodName) needs to be implemented to return true
even when cgroups is not available.
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>

Automated cherry pick of #76099: GCE/Windows: disable stackdriver logging agent

Automated cherry pick of #75772: Avoid panic in cronjob sorting

Automated cherry pick of #75515: godeps: update vmware/govmomi to v0.20 release

Automated cherry pick of #76111: Fix empty array expansion error in cluster/gce/util.sh

Automated cherry pick of #75362: Update gcp images with security patches

Empty array expansion causes "unbound variable" error in
bash 4.2 and bash 4.3.

Automated cherry pick of #76109: Removed cleanup for non-current kube-proxy modes in

This reverts commit 29ba1b03.

This reverts commit 4f1bb2bd.

kubeadm : fix-kubeadm-upgrade-12-13-14

Automated cherry pick of #75887: Explicitly flush headers when proxying

Automated cherry pick of #75781: kube-aggregator: bump openapi aggregation log level

Automated cherry pick of #75480: Update Cluster Autscaler version to 1.14.0

Automated cherry pick of #76039: Finish saving test results on failure

Automated cherry pick of #75855: Disable GCE agent address management on Windows nodes.

Automated cherry pick of #75900: kubeadm: fix "upgrade plan" not working without k8s version

Automated cherry pick of #75847: fix-external-etcd

Automated cherry pick of #75269: gce: configure: validate SA has storage scope

Automated cherry pick of #74919: Fix Windows to read VM UUIDs from serial numbers

Automated cherry pick of #75283 upstream release 1.14

This change handles the case where the ith cronjob may have its start
time set to nil.

Previously, the Less method could cause a panic in case the ith
cronjob had its start time set to nil, but the jth cronjob did not. It
would panic when calling Before on a nil StartTime.

The conformance image should be saving its results
regardless of the results of the tests. However,
with errexit set, when ginkgo gets test failures
it exits 1 which prevents saving the results
for Sonobuoy to pick up.

Fixes: #76036

The logging service could not be stopped at times, causing node startup
failures. Disable it until the issue is fixed.

With this metadata key set, "GCEWindowsAgent: GCE address manager
status: disabled" will appear in the VM's serial port output during
boot.

Tested:
PROJECT=${CLOUDSDK_CORE_PROJECT} KUBE_GCE_ENABLE_IP_ALIASES=true NUM_WINDOWS_NODES=2 NUM_NODES=2 KUBERNETES_NODE_PLATFORM=windows go run ./hack/e2e.go -- --up
cluster/gce/windows/smoke-test.sh

cat > iis.yaml <<EOF
apiVersion: v1
kind: Pod
metadata:
  name: iis
  labels:
    app: iis
spec:
  containers:
  - image: mcr.microsoft.com/windows/servercore/iis
    imagePullPolicy: IfNotPresent
    name: iis-server
    ports:
    - containerPort: 80
      protocol: TCP
  nodeSelector:
    beta.kubernetes.io/os: windows
  tolerations:
  - effect: NoSchedule
    key: node.kubernetes.io/os
    operator: Equal
    value: windows1809
EOF

kubectl create -f iis.yaml
kubectl expose pod iis --type=LoadBalancer --name=iis
kubectl get services
curl http://<service external IP address>

If the k8s version argument passed to "upgrade plan" is missing
the logic should perform the following actions:
- fetch a "stable" version from the internet.
- if that fails, fallback to the local client version.

Currentely the logic fails because the cfg.KubernetesVersion is
defaulted to the version of the existing cluster, which
then causes an early exit without any ugprade suggestions.

See app/cmd/upgrade/common.go::enforceRequirements():
  configutil.FetchInitConfigurationFromCluster(..)

Fix that by passing the explicit user value that can also be "".
This will then make the "offline getter" treat it as an explicit
desired upgrade target.

In the future it might be best to invert this logic:
- if no user k8s version argument is passed - default to the kubeadm
version.
- if labels are passed (e.g. "stable"), fetch a version from the
internet.