Automatic merge from submit-queue.

Automated cherry pick of #61926: Update libcontainer to include PRs with fixes to systemd

Cherry pick of #61926 on release-1.10.

#61926: Update libcontainer to include PRs with fixes to systemd

Automatic merge from submit-queue.

Prevent 1.10 e2es testing deprecated CAdvisorPort in 1.11

**What this PR does / why we need it**:
The public cadvisor port by default is disabled in #63881, targeted for v1.11.

But 1.10 e2e tests get run against v1.11+ masters during upgrade tests.

https://k8s-testgrid.appspot.com/sig-release-master-upgrade#gce-1.10-master-upgrade-cluster-parallel

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #64158

**Special notes for your reviewer**:
/cc luxas BenTheElder krzyzacy
 
**Release note**:

```release-note
Prevent 1.10 e2es testing deprecated CAdvisorPort in v1.11
```

Automatic merge from submit-queue.

Automated cherry pick of #63696: gce: Prefer MASTER_ADVERTISE_ADDRESS in apiserver setup

Cherry pick of #63696 on release-1.10.

#63696: gce: Prefer MASTER_ADVERTISE_ADDRESS in apiserver setup

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #61459: etcd client add dial timeout

Cherry pick of #61459 on release-1.10.

Fixes https://github.com/kubernetes/kubernetes/issues/62538

#61459: etcd client add dial timeout

```release-note
kube-apiserver now sets a dial timeout when connecting to etcd, to allow it to tolerate/retry connections to a dead etcd server
```

Automatic merge from submit-queue.

Don't panic is admission options is nil

Backport https://github.com/kubernetes/kubernetes/pull/63460

cc: @sttts @deads2k 

```release-note
nil admission options are now consistent with other nil options.
```

Automatic merge from submit-queue.

Automated cherry pick of #63961: Add a way to pass extra arguments to etcd.

Cherry pick of #63961 on release-1.10.

#63961: Add a way to pass extra arguments to etcd.

Automatic merge from submit-queue.

Automated cherry pick of #60585: kubeadm: surface external etcd preflight validation errors

Cherry pick of #60585 on release-1.10.

#60585: kubeadm: surface external etcd preflight validation errors

Automatic merge from submit-queue.

[1.10] Automated cherry pick of #63946: Wait for pod deletion instead of termination

**What this PR does / why we need it**:
cherry pick of #63946: Wait for pod deletion instead of termination

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #63923

**Release note**:

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #61644: Use inclien func to ensure unlock is executed

Cherry pick of #61644 on release-1.10.

#61644: Use inclien func to ensure unlock is executed

Automatic merge from submit-queue.

Automated cherry pick of #64029: Add environment variable to control truncating backend.

Cherry pick of #64029 on release-1.10.

#64029: Add environment variable to control truncating backend.

Signed-off-by: Alexander Brand <alexbrand09@gmail.com>

Automatic merge from submit-queue.

Implemented truncating audit backend

Fixes #60432

Introduces an optional truncating backend, disabled by default, that estimates the size of audit events and truncates events/split batches based on the configuration.

```release-note
Introduce truncating audit backend that can be enabled by passing --audit-log-truncate-enabled or --audit-webhook-truncate-enabled flag to the apiserver to limit the size of individual audit events and batches of events.
```

I had to manually remove dependency of original PR #61711, from #60056, that's why automated cherry-pick was not used.

Signed-off-by: Mik Vyatskov <vmik@google.com>

Automatic merge from submit-queue.

Automated cherry pick of #63220: fix formatting for memcg threshold

Cherry pick of #63220 on release-1.10.

#63220: fix formatting for memcg threshold

Merge pull request #63976 from aleksandra-malinowska/automated-cherry-pick-of-#63974-upstream-release-1.10

Automatic merge from submit-queue.

Automated cherry pick of #63974: Cluster Autoscaler 1.2.2

Cherry pick of #63974 on release-1.10.

#63974: Cluster Autoscaler 1.2.2

Automatic merge from submit-queue.

cherry-pick of #63495: kubeadm - fix upgrades with external etcd

**What this PR does / why we need it**:

Backports fixes for kubeadm upgrades with external etcd

**Release note**:
```release-note
kubeadm - fix upgrades with external etcd
```

Automatic merge from submit-queue.

Automated cherry pick of #63903: Revert "Specify DHCP domain for hostname"

Cherry pick of #63903 on release-1.10.

#63903: Revert "Specify DHCP domain for hostname"

MASTER_ADVERTISE_ADDRESS is used to set the --advertise-address flag
for the apiserver. It's useful for running the apiserver behind a load
balancer.

However, if PROJECT_ID, TOKEN_URL, TOKEN_BODY, and NODE_NETWORK are
all set, the GCE VM's external IP address will be fetched and used
instead and MASTER_ADVERTISE_ADDRESS will be ignored.

Change this behavior so that MASTER_ADVERTISE_ADDRESS takes precedence
because it's more specific. We still fall back to using the VM's
external IP address if the other variables are set.

Also: Pass --ssh-user and --ssh-keyfile flags if both PROXY_SSH_USER
and MASTER_ADVERTISE_ADDRESS is set.

- Update upgrade plan output when configured for external etcd
  - Move etcd to a separate section and show available upgrades

Automatic merge from submit-queue.

Automated cherry pick of #63049: renable nodeipam in kube-controller-manager

**What this PR does / why we need it**:
Re-enables nodeipam controller for external clouds. Also does a small refactor so that we don't need to pass in `allocateNodeCidr` into the controller. 

Cherry pick of https://github.com/kubernetes/kubernetes/pull/63049 which fixes a critical bug in v1.10 that blocks external clouds from running nodeipam controller. 

**Release note**:
```release-note
Re-enable nodeipam controller for external clouds. 
```

Automatic merge from submit-queue.

Update 1.10 test gpu_util.go to use the 1.10 nvidia-gpu device-plugin…

**What this PR does / why we need it**:
Update 1.10 test gpu_util.go to use the 1.10 nvidia-gpu device-plugin yaml.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note

```

Automatic merge from submit-queue.

Automated cherry pick of #63492: Always track kubelet -> API connections

Cherry pick of #63492 on release-1.10.

#63492: Always track kubelet -> API connections

This reverts commit eaac0f54.

This reverts commit 9a8c6db4.

This reverts commit da5ccf7f.

Automatic merge from submit-queue.

Cherrypick: Enable CUSTOM_INGRESS_YAML to replace the glbc manifest

This allows for customized versions of the Ingress YAML separate from
stock Kubernetes.

```release-note
NONE
```

Currently kubeadm only performs an upgrade if the etcd cluster is
colocated with the control plane node. As this is only one possible
configuration, kubeadm should support upgrades with etcd clusters
that are not local to the node.
Signed-off-by: Craig Tracey <craigtracey@gmail.com>

Automatic merge from submit-queue.

Automated cherry pick of #63353: Use the logging agent's node name as the metadata agent URL.

Cherry pick of #63353 on release-1.10.

#63353: Use the logging agent's node name as the metadata agent URL.