Bump debian-* base image versions to latest

move pkg/kubelet/apis/well_known_labels.go to staging/src/k8s.io/api/core/v1/

Add check-file-in-alphabetical-order for cleanup

ControllerRef creation through factory function

Fix #73479 AWS NLB target groups missing tags

Update CudaVectorAdd test image to be built with Cuda10 docker image.

kubeadm: do not create etcd datastore if we are in dryrun mode

Use ioutil.TempDir for temporary dir creation

The previous version of CudaVectorAdd test image can still be used
in our testing. A later change will extend the existing gpu e2e tests
to run pods with two containers. One with CudaVectorAdd version1 and
the other with CudaVectorAdd version2 so that we can test both
Cuda versions.

Add missing testcases

`elbv2.AddTags` doesn't seem to support assigning the same set of
tags to multiple resources at once leading to the following error:
  Error adding tags after modifying load balancer targets:
  "ValidationError: Only one resource can be tagged at a time"

This can happen when using AWS NLB with multiple listeners pointing
to different node ports.

When k8s creates a NLB it creates a target group per listener along
with installing security group ingress rules allowing the traffic to
reach the k8s nodes.

Unfortunately if those target groups are not tagged, k8s will not
manage them, thinking it is not the owner.

This small changes assigns tags one resource at a time instead of
batching them as before.
Signed-off-by: Brice Figureau <brice@daysofwonder.com>

kubeadm: improve ux on infoMsg kubeconfig

Support make test WHAT=path/to/pkg/...

Fix kubemark windows num nodes

Add image for sample-device-plugin

Switch WaitForCertificate to informers to avoid broken watches

kubelet: set low oom_score_adj for containers in critical pods

Importing the latest json patch and set the accumulated copy size limit

add bentheelder to reviewers

Ensure directories are executable for fsGroup

Ensure conditional validation has knowledge of old and new object

update doc.go in staging/ include cli-runtime 

kubeadm: graduate kubelet start join phase

This allows for kubeadm tests to pass when run with an unprivileged
user.

Remove remaining code for deprecated openapi paths

fix some typos in /pkg/volume

Shellcheck failures print-workspace-status.sh, run-in-gopath.sh

support multiple cidr vpc for nlb health check