update cadvisor, docker, and runc godeps

vendor/github.com/google/cadvisor/container/docker/BUILD

@@ -14,6 +14,7 @@ go_library(
         "//vendor/github.com/docker/engine-api/client:go_default_library",
         "//vendor/github.com/docker/engine-api/types:go_default_library",
         "//vendor/github.com/docker/engine-api/types/container:go_default_library",
+        "//vendor/github.com/docker/go-connections/tlsconfig:go_default_library",
         "//vendor/github.com/golang/glog:go_default_library",
         "//vendor/github.com/google/cadvisor/container:go_default_library",
         "//vendor/github.com/google/cadvisor/container/common:go_default_library",

vendor/github.com/google/cadvisor/container/docker/client.go

@@ -18,9 +18,11 @@
 package docker
 
 import (
+	"net/http"
 	"sync"
 
 	dclient "github.com/docker/engine-api/client"
+	"github.com/docker/go-connections/tlsconfig"
 )
 
 var (
@@ -29,9 +31,32 @@ var (
 	dockerClientOnce sync.Once
 )
 
+// Client creates a Docker API client based on the given Docker flags
 func Client() (*dclient.Client, error) {
 	dockerClientOnce.Do(func() {
-		dockerClient, dockerClientErr = dclient.NewClient(*ArgDockerEndpoint, "", nil, nil)
+		var client *http.Client
+		if *ArgDockerTLS {
+			client = &http.Client{}
+			options := tlsconfig.Options{
+				CAFile:             *ArgDockerCA,
+				CertFile:           *ArgDockerCert,
+				KeyFile:            *ArgDockerKey,
+				InsecureSkipVerify: false,
+			}
+			tlsc, err := tlsconfig.Client(options)
+			if err != nil {
+				dockerClientErr = err
+				return
+			}
+			client.Transport = &http.Transport{
+				TLSClientConfig: tlsc,
+			}
+		}
+		dockerClient, dockerClientErr = dclient.NewClient(*ArgDockerEndpoint,
+			"",
+			client,
+			nil)
+
 	})
 	return dockerClient, dockerClientErr
 }

vendor/github.com/google/cadvisor/container/docker/factory.go

@@ -41,6 +41,10 @@ import (
 )
 
 var ArgDockerEndpoint = flag.String("docker", "unix:///var/run/docker.sock", "docker endpoint")
+var ArgDockerTLS = flag.Bool("docker-tls", false, "use TLS to connect to docker")
+var ArgDockerCert = flag.String("docker-tls-cert", "cert.pem", "path to client certificate")
+var ArgDockerKey = flag.String("docker-tls-key", "key.pem", "path to private key")
+var ArgDockerCA = flag.String("docker-tls-ca", "ca.pem", "path to trusted CA")
 
 // The namespace under which Docker aliases are unique.
 const DockerNamespace = "docker"