Automatic merge from submit-queue.

Automated cherry pick of #60585: kubeadm: surface external etcd preflight validation errors

Cherry pick of #60585 on release-1.10.

#60585: kubeadm: surface external etcd preflight validation errors

Automatic merge from submit-queue.

[1.10] Automated cherry pick of #63946: Wait for pod deletion instead of termination

**What this PR does / why we need it**:
cherry pick of #63946: Wait for pod deletion instead of termination

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #63923

**Release note**:

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #61644: Use inclien func to ensure unlock is executed

Cherry pick of #61644 on release-1.10.

#61644: Use inclien func to ensure unlock is executed

Automatic merge from submit-queue.

Automated cherry pick of #64029: Add environment variable to control truncating backend.

Cherry pick of #64029 on release-1.10.

#64029: Add environment variable to control truncating backend.

Signed-off-by: Alexander Brand <alexbrand09@gmail.com>

Automatic merge from submit-queue.

Implemented truncating audit backend

Fixes #60432

Introduces an optional truncating backend, disabled by default, that estimates the size of audit events and truncates events/split batches based on the configuration.

```release-note
Introduce truncating audit backend that can be enabled by passing --audit-log-truncate-enabled or --audit-webhook-truncate-enabled flag to the apiserver to limit the size of individual audit events and batches of events.
```

I had to manually remove dependency of original PR #61711, from #60056, that's why automated cherry-pick was not used.

Signed-off-by: Mik Vyatskov <vmik@google.com>

Automatic merge from submit-queue.

Automated cherry pick of #63220: fix formatting for memcg threshold

Cherry pick of #63220 on release-1.10.

#63220: fix formatting for memcg threshold

Merge pull request #63976 from aleksandra-malinowska/automated-cherry-pick-of-#63974-upstream-release-1.10

Automatic merge from submit-queue.

Automated cherry pick of #63974: Cluster Autoscaler 1.2.2

Cherry pick of #63974 on release-1.10.

#63974: Cluster Autoscaler 1.2.2

Automatic merge from submit-queue.

cherry-pick of #63495: kubeadm - fix upgrades with external etcd

**What this PR does / why we need it**:

Backports fixes for kubeadm upgrades with external etcd

**Release note**:
```release-note
kubeadm - fix upgrades with external etcd
```

Automatic merge from submit-queue.

Automated cherry pick of #63903: Revert "Specify DHCP domain for hostname"

Cherry pick of #63903 on release-1.10.

#63903: Revert "Specify DHCP domain for hostname"

- Update upgrade plan output when configured for external etcd
  - Move etcd to a separate section and show available upgrades

Automatic merge from submit-queue.

Automated cherry pick of #63049: renable nodeipam in kube-controller-manager

**What this PR does / why we need it**:
Re-enables nodeipam controller for external clouds. Also does a small refactor so that we don't need to pass in `allocateNodeCidr` into the controller. 

Cherry pick of https://github.com/kubernetes/kubernetes/pull/63049 which fixes a critical bug in v1.10 that blocks external clouds from running nodeipam controller. 

**Release note**:
```release-note
Re-enable nodeipam controller for external clouds. 
```

Automatic merge from submit-queue.

Update 1.10 test gpu_util.go to use the 1.10 nvidia-gpu device-plugin…

**What this PR does / why we need it**:
Update 1.10 test gpu_util.go to use the 1.10 nvidia-gpu device-plugin yaml.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note

```

Automatic merge from submit-queue.

Automated cherry pick of #63492: Always track kubelet -> API connections

Cherry pick of #63492 on release-1.10.

#63492: Always track kubelet -> API connections

This reverts commit eaac0f54.

This reverts commit 9a8c6db4.

This reverts commit da5ccf7f.

Automatic merge from submit-queue.

Cherrypick: Enable CUSTOM_INGRESS_YAML to replace the glbc manifest

This allows for customized versions of the Ingress YAML separate from
stock Kubernetes.

```release-note
NONE
```

Currently kubeadm only performs an upgrade if the etcd cluster is
colocated with the control plane node. As this is only one possible
configuration, kubeadm should support upgrades with etcd clusters
that are not local to the node.
Signed-off-by: Craig Tracey <craigtracey@gmail.com>

Automatic merge from submit-queue.

Automated cherry pick of #63353: Use the logging agent's node name as the metadata agent URL.

Cherry pick of #63353 on release-1.10.

#63353: Use the logging agent's node name as the metadata agent URL.

Automatic merge from submit-queue.

Automated cherry pick of #63297: fix commands running crictl

Cherry pick of #63297 on release-1.10.

#63297: fix commands running crictl

**Release note**:
```release-note
Fix incorrect usage of Command API to run crictl in 'kubeadm reset'
```

This allows for customized versions of the Ingress YAML separate from
stock Kubernetes.

Running "kubeadm reset --cri-socket unix:///var/run/crio/crio.sock"
fails with this error:
[reset] Cleaning up running containers using crictl with socket unix:///var/run/crio/crio.sock
[reset] Failed to list running pods using crictl. Trying using docker instead.

The actual error returned by underlying API os/exec is:
fork/exec /usr/bin/crictl -r /var/run/crio/crio.sock info: no such file or directory

This is caused by passing full command line instead of executable
path as a first parameter to the Command API.

Fixed by passing correct parameters to the Command API.
Improved error output.

Fixed crictl commands stop->stopp, rm->rmp (taken from #63862)

Automatic merge from submit-queue.

Manual cherrypick of kube-openapi changes for release-1.10

**What this PR does / why we need it**:
Cherry-picks kubernetes/kube-openapi#64 and kubernetes/kube-openapi#67
Fixes bugs that make apiserver panic when aggregating valid but not well formed OpenAPI spec (with empty `Paths`/`Definitions`)

**Release note**:

```release-note
Fixes bugs that make apiserver panic when aggregating valid but not well formed OpenAPI spec
```

/cc @MaciekPytel
/sig api-machinery

Automatic merge from submit-queue.

Automated cherry pick of #62018: remove IsAbs validation on local volume

Cherry pick of #62018 on release-1.10.

#62018: remove IsAbs validation on local volume

Automatic merge from submit-queue.

[1.10] Automated cherry pick of #63045: passthrough readOnly to subpath

cherry pick of #63045: passthrough readOnly to subpath

**Release note**:

```release-note
Fixes issue where subpath readOnly mounts failed
```

Automatic merge from submit-queue.

Backport MAX_PODS_PER_NODE env from #63114 to 1.10

**What this PR does / why we need it**:
Backport `MAX_PODS_PER_NODE` env changes from #63114 to 1.10. This allows GCE/GKE users to explicitly set default limits on how many pods a node can have for the nodes in this cluster.

**Special notes for your reviewer**:
/assign @bowei 

**Release note**:

```release-note
Add MAX_PODS_PER_NODE env so that GCE/GKE user can use it to specify the default max pods per node for the cluster. IP_ALIAS_SIZE will be changed accordingly. Must have ip alias enabled.
```

Automatic merge from submit-queue.

Automated cherry pick of #63761: Avoid copying aggregated admin/edit/view roles during

Cherry pick of #63761 on release-1.10.

#63761: Avoid copying aggregated admin/edit/view roles during

Automatic merge from submit-queue.

Fix Deployment e2e on master upgrade (62703)

**What this PR does / why we need it**:
Selector and label mutation for RSs created by Deploys has been deprecated, but the e2e in this version still checks for it. We need to remove these checks in order for master upgrade validation to pass.

Fixes #62703

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #62621: Show deprecated kube-apiserver flags

Cherry pick of #62621 on release-1.10.

#62621: Show deprecated kube-apiserver flags

```release-note
Show help for deprecated kube-apiserver flags
```