Automatic merge from submit-queue.

Backport Calico related fixes to release 1.10

**What this PR does / why we need it**:
We need to run Calico 3.0+ on GCP and we need to customize MTU when Calico CNI is used on GCP.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #65045 #65067

**Special notes for your reviewer**:

**Release note**:

```release-note
"NONE"
```

Automatic merge from submit-queue.

Automated cherry pick of #63268: Make kubelet `ReadLogs` backward compatible.

Cherry pick of #63268 on release-1.10.

#63268: Make kubelet `ReadLogs` backward compatible.

```release-note
Make kubelet ReadLogs backward compatible.
```

Automatic merge from submit-queue.

Automated cherry pick of #62743: Fix NPD preload.

Cherry pick of #62743 on release-1.10.

#62743: Fix NPD preload.

We need to cherry-pick this because node startup time on GCE slows down for 10 seconds without this. /cc @MaciekPytel 

@yujuhong @mwielgus

Automatic merge from submit-queue.

Automated cherry pick of #64957: set EnableHTTPSTrafficOnly in storageAccount creation

Cherry pick of #64957 on release-1.10.

#64957: set EnableHTTPSTrafficOnly in storageAccount creation

Automatic merge from submit-queue.

Automated cherry pick of #65499: Removes defaulting of CSI fsType to ext4

Cherry pick of #65499 on release-1.10.

#65499: Removes defaulting of CSI fsType to ext4

Automatic merge from submit-queue.

Ensure /etc/hosts has a header always - Fix conformance test

We have 2 scenarios where we copy /etc/hosts
- with host network (we just copy the /etc/hosts from node)
- without host network (create a fresh /etc/hosts from pod info)

We are having trouble figuring out whether a /etc/hosts in a
pod/container has been "fixed-up" or not. And whether we used
host network or a fresh /etc/hosts in the various ways we start
up the tests which are:

- VM/box against a remote cluster
- As a container inside the k8s cluster
- DIND scenario in CI where test runs inside a managed container

Please see previous mis-guided attempt to fix this problem at
ba20e634 In this commit we revert
the code from there as well.

So we should make sure:
- we always add a header if we touched the file
- we add slightly different headers so we can figure out if we used the
  host network or not.

Update the test case to inject /etc/hosts from node to another path
(/etc/hosts-original) as well and use that to compare.



**What this PR does / why we need it**:

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
Rework Kubelet set `/etc/hosts` behavior to fix conformance testability
```

Automatic merge from submit-queue.

Automated cherry pick of #65926: Fix RunAsGroup.

Cherry pick of #65926 on release-1.10.

#65926: Fix RunAsGroup.

Signed-off-by: Lantao Liu <lantaol@google.com>

Automatic merge from submit-queue.

Automated cherry pick of #65987: Fix pod worker deadlock.

Cherry pick of #65987 on release-1.10.

#65987: Fix pod worker deadlock.

Automatic merge from submit-queue.

Automated cherry pick of #63270: remove format operation in WaitForAttach

Cherry pick of #63270 on release-1.10.

#63270: remove format operation in WaitForAttach

Adding generated files

Fixing comments in types.go

Automatic merge from submit-queue.

[1.10] gc: remove crd and apiservice from ignored resources

Fixes #65818

This PR cherry-picks CRD and APIService removal from GC ignored resources, from #65856 and #65915.

**Release note**:
```release-note
The garbage collector now supports CustomResourceDefinitions and APIServices.
```

/cc @nikhita @liggitt 
/sig api-machinery
/kind bug
/priority important-soon

Signed-off-by: Lantao Liu <lantaol@google.com>

Co-authored-by: Casey Davenport <casey@tigera.io>

Automatic merge from submit-queue.

Automated cherry pick of #65751: fix smb mount security issue

Cherry pick of #65751 on release-1.10.

#65751: fix smb mount security issue

Automatic merge from submit-queue.

Automated cherry pick of #64539: etcd: reuse leases for keys in a time window

Cherry pick of #64539 on release-1.10.

#64539: etcd: reuse leases for keys in a time window

This is it an important bug fix for scalability.

cc @jpbetz

Automatic merge from submit-queue.

Automated cherry pick of #65092: apiextensions: fix concurrent map access copying items'

Cherry pick of #65092 on release-1.10.

#65092: apiextensions: fix concurrent map access copying items'

Automatic merge from submit-queue.

Automated cherry pick of #65373: BUGFIX: must use ID, not name, of the node security group

Cherry pick of #65373 on release-1.10.

#65373: BUGFIX: must use ID, not name, of the node security group

Automatic merge from submit-queue.

Automated cherry pick of #65702: Reload systemd config files before starting kubelet.

Cherry pick of #65702 on release-1.10.

#65702: Reload systemd config files before starting kubelet.

Automatic merge from submit-queue.

Automated cherry pick of #64895: In case storage class parameters are empty, create a new map

Cherry pick of #64895 on release-1.10.

#64895: In case storage class parameters are empty, create a new map

Automatic merge from submit-queue.

Automated cherry pick of #64427: add external resource group support for azure disk

Cherry pick of #64427 on release-1.10.

#64427: add external resource group support for azure disk

Automatic merge from submit-queue.

Automated cherry pick of #65412: skip nic that are in failing state

Cherry pick of #65412 on release-1.10.

#65412: skip nic that are in failing state

Automatic merge from submit-queue.

Automated cherry pick of #65548: Bug fix: Should allow alias range size equals to max number

Cherry pick of #65548 on release-1.10.

#65548: Bug fix: Should allow alias range size equals to max number

Automatic merge from submit-queue.

Automated cherry pick of #65289: Add a GPUClusterDowngrade test.

Cherry pick of #65289 on release-1.10.

#65289: Add a GPUClusterDowngrade test.

In some environments, the os image comes with preloaded kubelet.service,
so we need to reload systemctl configs to make changes effective.

fix naming issue

fix comments