`elbv2.AddTags` doesn't seem to support assigning the same set of
tags to multiple resources at once leading to the following error:
  Error adding tags after modifying load balancer targets:
  "ValidationError: Only one resource can be tagged at a time"

This can happen when using AWS NLB with multiple listeners pointing
to different node ports.

When k8s creates a NLB it creates a target group per listener along
with installing security group ingress rules allowing the traffic to
reach the k8s nodes.

Unfortunately if those target groups are not tagged, k8s will not
manage them, thinking it is not the owner.

This small changes assigns tags one resource at a time instead of
batching them as before.

Signed-off-by: Brice Figureau <brice@daysofwonder.com>

If a iSCSI target is down while a volume is attached, reading from
/sys/class/iscsi_host/host415/device/session383/connection383:0/iscsi_connection/connection383:0/address
fails with an error. Kubelet should assume that such target is not
available / logged in and try to relogin. Eventually, if such error
persists, it should continue mounting the volume if the other
paths are healthy instead of failing whole WaitForAttach().

apply fix for msi and fix test failure

Use Nginx as the DaemonSet image instead of the ServeHostname image.
This was changed because the ServeHostname has a sleep after terminating
which makes it incompatible with the DaemonSet Rolling Upgrade e2e test.

In addition, make the DaemonSet Rolling Upgrade e2e test timeout a
function of the number of nodes that make up the cluster. This is
required because the more nodes there are, the longer the time it will
take to complete a rolling upgrade.

Signed-off-by: Alexander Brand <alexbrand09@gmail.com>

Always report 0 cpu/memory usage for exited containers to make
metrics-server work as expect.

Signed-off-by: Lu Fengqi <lufq.fnst@cn.fujitsu.com>

while cleaning up ipvs mode. flushing iptable chains first and then
remove the chains. this avoids trying to remove chains that are still
referenced by rules in other chains.

fixes kubernetes#70615

…er that requests any device plugin resource. If not, re-issue Allocate grpc calls. This allows us to handle the edge case that a pod got assigned to a node even before it populates its extended resource capacity.

…pick-of-#74636-upstream-release-1.13

Automated cherry pick of kubernetes#74636: Remove reflector metrics as they currently cause a memory

…k-of-#73968-upstream-release-1.13

Automated cherry pick of kubernetes#73968: record event on endpoint update failure

…y-pick-of-#74371-upstream-release-1.13

Automated cherry pick of kubernetes#74371: add health plugin in the DNS tests

Rebase docker image on debian-base:0.4.1

…ata from metadata.

…unmounted volume

This is a cherrypick of the following commit
https://github.com/kubernetes/kubernetes/pull/74290/commits

This is to deal with the flaky session affinity test.

…ck-of-#75073-upstream-release-1.13

Automated cherry pick of kubernetes#75073: Allow session affinity a period of time to setup for new

- check if a pod is static by its static pod info
- meanwhile, check if a pod is critical by its corresponding mirror pod info

…pick-of-#74599-upstream-release-1.13

Automated cherry pick of kubernetes#74599: add more logging in azure disk attach/detach

…pick-of-#74715-upstream-release-1.13

Automated cherry pick of kubernetes#74715: add Azure Container Registry anonymous repo support

…ck-of-#72738-upstream-release-1.13

Automated cherry pick of kubernetes#72738: DaemonSet e2e: Update image and rolling upgrade test timeout

…k-of-#74755-upstream-release-1.13

Automated cherry pick of kubernetes#74755: Revert kubelet to default to ttl cache secret/configmap

…ick-of-#73594-upstream-release-1.13

Automated cherry pick of kubernetes#73594: Fix kubernetes#73479 AWS NLB target groups missing tags

…k-of-#70616-upstream-release-1.13

Automated cherry pick of kubernetes#70616: flush iptable chains first and then remove them

…k-of-#75037-upstream-release-1.13

Automated cherry pick of kubernetes#75037: Fix panic in kubectl cp command

…ick-of-#74625-upstream-release-1.13

Automated cherry pick of kubernetes#74625: GetMountRefs fixed to handle corrupted mounts by treating it

…pick-of-#74336-origin-release-1.13

Automated cherry pick of kubernetes#74336: cri_stats_provider: overload nil as 0 for exited containers

…pick-of-#74936-upstream-release-1.13

Automated cherry pick of kubernetes#74936: Adding a check to make sure UseInstanceMetadata flag is true

…ck-of-#75256-upstream-release-1.13

Automated cherry pick of kubernetes#75256: Ensure Azure load balancer cleaned up on 404 or 403

…ck-of-#75282-upstream-release-1.13

Automated cherry pick of kubernetes#75282: Allow disable outbound snat when Azure standard load balancer

fix log warning

use IsCorruptedMnt in GetMountRefs on Windows

use errorno in IsCorruptedMnt check

fix comments: add more error code

add more error no checking

change year

fix comments

change var name

Fix the network policy tests.

…of-#74653-upstream-release-1.13

Automated cherry pick of kubernetes#74653: Distinguish volume path with mount path

…k-of-#74448-upstream-release-1.13

Automated cherry pick of kubernetes#74448: Explicitly set GVK when sending objects to webhooks

…of-#74652-upstream-release-1.13

Automated cherry pick of kubernetes#74652: Delay CSI client initialization

…k-of-#75455-upstream-release-1.13

Automated cherry pick of kubernetes#75455: build/gci: bump CNI version to 0.7.5

…n-1-13-2

Update Cluster Autoscaler version to 1.13.2

…ick-of-#74222-upstream-release-1.13

[1.13] Automated cherry pick of kubernetes#75144: kubelet: updated logic of verifying a static critical pod

Bump debian-iptables to v11.0.1

…ck-of-#73824-upstream-release-1.13

Automated cherry pick of kubernetes#73824: Checks whether we have cached runtime state before starting a

…ere_zone_1_13

places vsphere volumes as per zones

…v2beta2 is not supported

…k-of-#75451-upstream-release-1.13

Automated cherry pick of kubernetes#75451: Restore username and password kubectl flags

…IP` Fixes: kubernetes#75236

xref: kubernetes#75653

Signed-off-by: Jorge Alarcon Ochoa <alarcj137@gmail.com>

…k-of-#75659-upstream-release-1.13

Automated cherry pick of kubernetes#75659: Bump go-openapi/jsonpointer and go-openapi/jsonreference

…ck-of-#75176-upstream-release-1.13

Automated cherry pick of kubernetes#75176: make describers of different versions work properly when

…ck-of-#71561-upstream-release-1.13

Automated cherry pick of kubernetes#71561: Fix updating 'currentMetrics' field for HPA with

add check `attachableVolumePlugin == nil` to operationGenerator.GenerateDetachVolumeFunc()

…meral-storage in node status

…ck-of-#74306-upstream-release-1.13

Automated cherry pick of kubernetes#74306: Fix scanning of failed targets

[stackdriver addon] Bump prometheus-to-sd to v0.5.0 to pick up security fixes.
[fluentd-gcp addon] Bump fluentd-gcp-scaler to v0.5.1 to pick up security fixes.
[fluentd-gcp addon] Bump event-exporter to v0.2.4 to pick up security fixes.
[fluentd-gcp addon] Bump prometheus-to-sd to v0.5.0 to pick up security fixes.
[metatada-proxy addon] Bump prometheus-to-sd v0.5.0 to pick up security fixes.

This change handles the case where the ith cronjob may have its start
time set to nil.

Previously, the Less method could cause a panic in case the ith
cronjob had its start time set to nil, but the jth cronjob did not. It
would panic when calling Before on a nil StartTime.

…pick-of-#72143-upstream-release-1.13

Automated cherry pick of kubernetes#72143: Fix aad support in kubectl for sovereign cloud

…-of-#74764-upstream-release-1.13

Automated cherry pick of kubernetes#74764: bump repd min size in e2es

…k-of-#75295-upstream-release-1.13

Automated cherry pick of kubernetes#75295 upstream release 1.13

…k-of-#75283-upstream-release-1.13

Automated cherry pick of kubernetes#75283 upstream release 1.13

…-pick-of-#73288-upstream-release-1.13

Automated cherry pick of kubernetes#73288 to release-1.13: Decouple node-problem-detector release from kubernetes

…ick-of-#75375-upstream-release-1.13

Automated cherry pick of kubernetes#75375: stop vsphere cloud provider from spamming logs with `failed

…o use StorageClassTest to generate PVC template

The Create, Delete, Get, Patch, Update and UpdateStatus
methods in the dynamic client all expect the name
parameter to be non-empty, but did not validate this
requirement, which could lead to a panic. Add explicit
checks to these methods.

…-of-#75362-upstream-release-1.13

Automated cherry pick of kubernetes#75362: Update gcp images with security patches

1.13: Fix AWS driver fails to provision specified fsType

…-of-#75746-upstream-release-1.13

Automated cherry pick of kubernetes#75746: Updated regional PD minimum size; changed regional PD