Automatic merge from submit-queue.

Add retry to AssertCleanup

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
This addresses the other two problems mentioned in https://github.com/kubernetes/kubernetes/issues/64362 by cherry-picking https://github.com/kubernetes/kubernetes/pull/61565 and https://github.com/kubernetes/kubernetes/pull/62155 on to 1.10 release. 

**Release note**:
```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #64180:  Check SessionAffinity for Azure load balancer

Cherry pick of #64180 on release-1.10.

#64180: Check SessionAffinity for Azure load balancer

Automatic merge from submit-queue.

Automated cherry pick of #61926: Update libcontainer to include PRs with fixes to systemd

Cherry pick of #61926 on release-1.10.

#61926: Update libcontainer to include PRs with fixes to systemd

Automatic merge from submit-queue.

Prevent 1.10 e2es testing deprecated CAdvisorPort in 1.11

**What this PR does / why we need it**:
The public cadvisor port by default is disabled in #63881, targeted for v1.11.

But 1.10 e2e tests get run against v1.11+ masters during upgrade tests.

https://k8s-testgrid.appspot.com/sig-release-master-upgrade#gce-1.10-master-upgrade-cluster-parallel

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #64158

**Special notes for your reviewer**:
/cc luxas BenTheElder krzyzacy
 
**Release note**:

```release-note
Prevent 1.10 e2es testing deprecated CAdvisorPort in v1.11
```

Automatic merge from submit-queue.

Automated cherry pick of #63696: gce: Prefer MASTER_ADVERTISE_ADDRESS in apiserver setup

Cherry pick of #63696 on release-1.10.

#63696: gce: Prefer MASTER_ADVERTISE_ADDRESS in apiserver setup

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #61459: etcd client add dial timeout

Cherry pick of #61459 on release-1.10.

Fixes https://github.com/kubernetes/kubernetes/issues/62538

#61459: etcd client add dial timeout

```release-note
kube-apiserver now sets a dial timeout when connecting to etcd, to allow it to tolerate/retry connections to a dead etcd server
```

Automatic merge from submit-queue.

Don't panic is admission options is nil

Backport https://github.com/kubernetes/kubernetes/pull/63460

cc: @sttts @deads2k 

```release-note
nil admission options are now consistent with other nil options.
```

Automatic merge from submit-queue.

Automated cherry pick of #63961: Add a way to pass extra arguments to etcd.

Cherry pick of #63961 on release-1.10.

#63961: Add a way to pass extra arguments to etcd.

Automatic merge from submit-queue.

Automated cherry pick of #60585: kubeadm: surface external etcd preflight validation errors

Cherry pick of #60585 on release-1.10.

#60585: kubeadm: surface external etcd preflight validation errors

Automatic merge from submit-queue.

[1.10] Automated cherry pick of #63946: Wait for pod deletion instead of termination

**What this PR does / why we need it**:
cherry pick of #63946: Wait for pod deletion instead of termination

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #63923

**Release note**:

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #61644: Use inclien func to ensure unlock is executed

Cherry pick of #61644 on release-1.10.

#61644: Use inclien func to ensure unlock is executed

Automatic merge from submit-queue.

Automated cherry pick of #64029: Add environment variable to control truncating backend.

Cherry pick of #64029 on release-1.10.

#64029: Add environment variable to control truncating backend.

Signed-off-by: Alexander Brand <alexbrand09@gmail.com>

Automatic merge from submit-queue.

Implemented truncating audit backend

Fixes #60432

Introduces an optional truncating backend, disabled by default, that estimates the size of audit events and truncates events/split batches based on the configuration.

```release-note
Introduce truncating audit backend that can be enabled by passing --audit-log-truncate-enabled or --audit-webhook-truncate-enabled flag to the apiserver to limit the size of individual audit events and batches of events.
```

I had to manually remove dependency of original PR #61711, from #60056, that's why automated cherry-pick was not used.

Signed-off-by: Mik Vyatskov <vmik@google.com>

Automatic merge from submit-queue.

Automated cherry pick of #63220: fix formatting for memcg threshold

Cherry pick of #63220 on release-1.10.

#63220: fix formatting for memcg threshold

Merge pull request #63976 from aleksandra-malinowska/automated-cherry-pick-of-#63974-upstream-release-1.10

Automatic merge from submit-queue.

Automated cherry pick of #63974: Cluster Autoscaler 1.2.2

Cherry pick of #63974 on release-1.10.

#63974: Cluster Autoscaler 1.2.2

Automatic merge from submit-queue.

cherry-pick of #63495: kubeadm - fix upgrades with external etcd

**What this PR does / why we need it**:

Backports fixes for kubeadm upgrades with external etcd

**Release note**:
```release-note
kubeadm - fix upgrades with external etcd
```

Automatic merge from submit-queue.

Automated cherry pick of #63903: Revert "Specify DHCP domain for hostname"

Cherry pick of #63903 on release-1.10.

#63903: Revert "Specify DHCP domain for hostname"

MASTER_ADVERTISE_ADDRESS is used to set the --advertise-address flag
for the apiserver. It's useful for running the apiserver behind a load
balancer.

However, if PROJECT_ID, TOKEN_URL, TOKEN_BODY, and NODE_NETWORK are
all set, the GCE VM's external IP address will be fetched and used
instead and MASTER_ADVERTISE_ADDRESS will be ignored.

Change this behavior so that MASTER_ADVERTISE_ADDRESS takes precedence
because it's more specific. We still fall back to using the VM's
external IP address if the other variables are set.

Also: Pass --ssh-user and --ssh-keyfile flags if both PROXY_SSH_USER
and MASTER_ADVERTISE_ADDRESS is set.

- Update upgrade plan output when configured for external etcd
  - Move etcd to a separate section and show available upgrades

Automatic merge from submit-queue.

Automated cherry pick of #63049: renable nodeipam in kube-controller-manager

**What this PR does / why we need it**:
Re-enables nodeipam controller for external clouds. Also does a small refactor so that we don't need to pass in `allocateNodeCidr` into the controller. 

Cherry pick of https://github.com/kubernetes/kubernetes/pull/63049 which fixes a critical bug in v1.10 that blocks external clouds from running nodeipam controller. 

**Release note**:
```release-note
Re-enable nodeipam controller for external clouds. 
```

Automatic merge from submit-queue.

Update 1.10 test gpu_util.go to use the 1.10 nvidia-gpu device-plugin…

**What this PR does / why we need it**:
Update 1.10 test gpu_util.go to use the 1.10 nvidia-gpu device-plugin yaml.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note

```