Automatic merge from submit-queue.

Automated cherry pick of #64739: Fix panic while provisioning Azure security group rules

Cherry pick of #64739 on release-1.10.

#64739: Fix panic while provisioning Azure security group rules

Automatic merge from submit-queue.

Automated cherry pick of #63631: Add gpu cluster upgrade test.

Cherry pick of #63631 on release-1.10.

#63631: Add gpu cluster upgrade test.

We added a gpu upgrade test config from 1.9-1.10 (https://github.com/kubernetes/test-infra/pull/8262). From the test logs, looks like the cluster upgrade test is using the e2e test version from the latest 1.10 release which doesn't have the newly added GPUUpgrade test. There doesn't seem to be an easy way to use the e2e test version from a head release while running the upgrade test for older release version. Cherry-picking the upgrade test to 1.10 branch so that we can gpu upgrade test from 1.9 to 1.10.

Merge pull request #64813 from cblecker/automated-cherry-pick-of-#58972-#63650-upstream-release-1.10

Automatic merge from submit-queue.

Automated cherry pick of #58972: Fix job's backoff limit for restart policy OnFailure #63650: Never clean backoff in job controller

Cherry pick of #58972 #63650 on release-1.10.

#58972: Fix job's backoff limit for restart policy OnFailure
#63650: Never clean backoff in job controller

Fixes #62382.

**Release Note:**
```release-note
Fix regression in `v1.JobSpec.backoffLimit` that caused failed Jobs to be restarted indefinitely.
```

Automatic merge from submit-queue.

Automated cherry pick of #64727: Update GCE cloud provider to use Cloud TPU v1 API

Cherry pick of #64727 on release-1.10.

#64727: Update GCE cloud provider to use Cloud TPU v1 API

Merge pull request #64929 from ixdy/automated-cherry-pick-of-#61575-#57600-#62499-upstream-release-1.10

Automatic merge from submit-queue.

Automated cherry pick of #61575: Remove all upstream BUILD, BUILD.bazel, and WORKSPACE #57600: Vendor gazelle #62499: Update kazel to include openapi tag detection fix

Cherry pick of #61575 #57600 #62499 on release-1.10.

#61575: Remove all upstream BUILD, BUILD.bazel, and WORKSPACE
#57600: Vendor gazelle
#62499: Update kazel to include openapi tag detection fix

This is an alternative to #64928, and would fix #64925.

We can't just cherry-pick #57600, since there was a prerequisite PR and a fixup PR afterwards.

Automatic merge from submit-queue.

Skip Sysctl tests against v1.11.0-alpha.0 and newer

**What this PR does / why we need it**:

1.10 e2e tests get run against 1.11.0+ masters during upgrade tests.
This fails as Sysctl moved from annotations to fields, so we should
check the version and avoid running these tests.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #64845

**Special notes for your reviewer**:

**Release note**:

```release-note
NONE
```

Automatic merge from submit-queue.

Automated cherry pick of #63248: fix formatAndMount func issue on Windows

Cherry pick of #63248 on release-1.10.

#63248: fix formatAndMount func issue on Windows

Automatic merge from submit-queue.

Skip updating status for DaemonSet being deleted

**What this PR does / why we need it**: #64313, https://github.com/kubernetes/kubernetes/pull/64797#issuecomment-395152965

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
Skip updating status for DaemonSet being deleted.
```

1.10 e2e tests get run against 1.11.0+ masters during upgrade tests.
This fails as Sysctl moved from annotations to fields, so we should
check the version and avoid running these tests.

Automatic merge from submit-queue.

[1.10] Automated cherry pick of #64351: Only mount subpath as readonly if specified in volumeMount

Automated cherry pick of #64351: Only mount subpath as readonly if specified in volumeMount

**Release note**:

```release-note
Fixes issue for readOnly subpath mounts for SELinux systems and when the volume mountPath already existed in the container image.
```

Automatic merge from submit-queue.

Automated cherry pick of #64519: CSI fix for gRPC conn leak, test updates

Cherry pick of #64519 on release-1.10.

#64519: CSI fix for gRPC conn leak, test updates

```release-note
Fixed CSI gRPC connection leak during volume operations.
```

Merge pull request #62938 from pospispa/60764-StorageObjectInUseProtection-downgrade-issue-cherry-pick-into-K8s-1.10

Automatic merge from submit-queue.

cherry-pick into K8s 1.10: Always Start pvc-protection-controller and pv-protection-controller

**What this PR does / why we need it**:
StorageObjectInUseProtection feature is enabled by default in K8s 1.10+. Assume K8s cluster is used with this feature enabled, i.e. finalizers are added to all PVs and PVCs. In case the K8s cluster admin disables the StorageObjectInUseProtection feature and a user deletes a PVC that is not in active use by a pod then the PVC is not removed from the system because of the finalizer. Therefore, the user will have to remove the finalizer manually in order to have the PVC removed from the system. Note: deleted PVs won't be removed from the system also because of finalizers.

This problem was fixed in [K8s 1.9.6](https://github.com/kubernetes/kubernetes/releases/tag/v1.9.6) in PR https://github.com/kubernetes/kubernetes/pull/61370
This problem is also fixed in K8s 1.11+ in PR https://github.com/kubernetes/kubernetes/pull/61324
However, this problem is not fixed in K8s 1.10, that's why I've cherry-picked the PR https://github.com/kubernetes/kubernetes/pull/61324 and proposing to merge it into K8s 1.10.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes 
N/A

Related issue: https://github.com/kubernetes/kubernetes/issues/60764

**Special notes for your reviewer**:

**Release note**:

```release-note
In case StorageObjectInUse feature is disabled and Persistent Volume (PV) or Persistent Volume Claim (PVC) contains a finalizer and the PV or PVC is deleted it is not automatically removed from the system. Now, it is automatically removed.
```

Automatic merge from submit-queue.

Automated cherry pick of #63770: Implement Skip() for ingress upgrade test

Cherry pick of #63770 on release-1.10.

#63770: Implement Skip() for ingress upgrade test

```release-note
NONE
```

fix comments

fix comments

fix comments

fix comments

fix comments

Automatic merge from submit-queue.

Automated cherry pick of #62753: Fix extra-log flag for node e2e.

Cherry pick of #62753 on release-1.10.

#62753: Fix extra-log flag for node e2e.

Automatic merge from submit-queue.

Automated cherry pick of #64026: Add SELinux support to CSI

Cherry pick of #64026 on release-1.10.

#64026: Add GetSELinuxSupport to mounter.

```release-note
Fixed SELinux relabeling of CSI volumes.
```

Automatic merge from submit-queue.

Automated cherry pick of #62670: Fix kubelet flags.

Cherry pick of #62670 on release-1.10.

#62670: Fix kubelet flags.

Signed-off-by: Lantao Liu <lantaol@google.com>