Automatic merge from submit-queue.

Automated cherry pick of #66264: extend timeout to workaround slow arm64 math

Cherry pick of #66264 on release-1.10.

#66264: extend timeout to workaround slow arm64 math

Automatic merge from submit-queue.

Automated cherry pick of #64172 release 1.10

Automated cherry pick of #64172 release 1.10

```release-note
Reorder the authorizers in GCP to reduce traffic on the authorization webhook.
```

Automatic merge from submit-queue.

Automated cherry pick of #66400: Return correct error type and HTTP Status code for operation

Cherry pick of #66400 on release-1.10.

#66400: Return correct error type and HTTP Status code for operation

Automatic merge from submit-queue.

Remove patch retry conflict detection

Minimal backport of #63146
Fixes #58002

Fixes spurious patch errors for CRDs
Fixes patch errors for nodes when the watch cache has a persistently stale version of an object

```release-note
fixes spurious "meaningful conflict" error encountered by nodes attempting to update status, which could cause them to be considered unready
```

Merge pull request #66355 from krunaljain/automated-cherry-pick-of-#66172-#66324-upstream-release-1.10

Automatic merge from submit-queue.

Automated cherry pick of #66172: Reverting commit #56600 as GCE PD is allocated in chunks of #66324: Fixing E2E tests for disk resizing

Cherry pick of #66172 #66324 on release-1.10.

#66172: Reverting commit #56600 as GCE PD is allocated in chunks of
#66324: Fixing E2E tests for disk resizing

```release-note 
none 
```

Automatic merge from submit-queue.

Automated cherry pick of #63272: fix IsLikelyNotMountPoint func on Windows

Cherry pick of #63272 on release-1.10.

#63272: fix IsLikelyNotMountPoint func on Windows

The math/big functions are slow on arm64. There is improvement coming
with go1.11 but in the mean time if a server uses rsa certificates on
arm64, the math load for the multitude of watches over taxes the ability
of the processor and the TLS connections time out. Retries will also not
succeed and serve to exacerbate the problem.

By extending the timeout, the TLS connections will eventually be
successful and the load will drop.

Fixes #64649

Automatic merge from submit-queue.

Automated cherry pick of #66261 to upstream release-1.10

Cherry pick of #66261 on release-1.10
#66261: Fix locating resourcepool-path specified in the vsphere.conf file

Release note:

```
Fix locating resourcepool-path specified in the vsphere.conf file
```


cc: @kubernetes/vmware

Automatic merge from submit-queue.

Automated cherry pick of #63424: Fix issue #63183 that pods on different nodes mount Ceph RBD

Cherry pick of #63424 on release-1.10.

#63424: Fix issue #63183 that pods on different nodes mount Ceph RBD

```release-note
#63424: Fix issue #63183 that pods on different nodes mount Ceph RBD
```

Merge pull request #65529 from jsafrane/automated-cherry-pick-of-#64882-#65323-upstream-release-1.10

Automatic merge from submit-queue.

Automated cherry pick of #64882: Fix UnmountDevice with deleted pod. #65323: Fix cleanup of volume metadata json file.

Cherry pick of #64882 #65323 on release-1.10.

#64882: Fix UnmountDevice with deleted pod.
#65323: Fix cleanup of volume metadata json file.

```release-note
Fixed cleanup of CSI metadata files.
```

Fixing comments and importing constant from util

Importing constant from util

Fixing comment in volume_provisioning.go

Automatic merge from submit-queue.

Automated cherry pick of #65823: Fix truncating and buffering backends integration.

Cherry pick of #65823 on release-1.10.

#65823: Fix truncating and buffering backends integration.

Automatic merge from submit-queue.

Automated cherry pick of #66165: Compare stateful set updates semantically

Cherry pick of #66165 on release-1.10.

#66165: Compare stateful set updates semantically

```release-note
fixes a validation error that could prevent updates to StatefulSet objects containing non-normalized resource requests
```

Automatic merge from submit-queue.

Automated cherry pick of #64598: Remove optimization from getWork in

Cherry pick of #64598 on release-1.10.

#64598: Remove optimization from getWork in

Automatic merge from submit-queue.

Backport Calico related fixes to release 1.10

**What this PR does / why we need it**:
We need to run Calico 3.0+ on GCP and we need to customize MTU when Calico CNI is used on GCP.

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #65045 #65067

**Special notes for your reviewer**:

**Release note**:

```release-note
"NONE"
```

Automatic merge from submit-queue.

Automated cherry pick of #63268: Make kubelet `ReadLogs` backward compatible.

Cherry pick of #63268 on release-1.10.

#63268: Make kubelet `ReadLogs` backward compatible.

```release-note
Make kubelet ReadLogs backward compatible.
```

Automatic merge from submit-queue.

Automated cherry pick of #62743: Fix NPD preload.

Cherry pick of #62743 on release-1.10.

#62743: Fix NPD preload.

We need to cherry-pick this because node startup time on GCE slows down for 10 seconds without this. /cc @MaciekPytel 

@yujuhong @mwielgus

Automatic merge from submit-queue.

Automated cherry pick of #64957: set EnableHTTPSTrafficOnly in storageAccount creation

Cherry pick of #64957 on release-1.10.

#64957: set EnableHTTPSTrafficOnly in storageAccount creation

Minimal backport of #63146

Fixes spurious patch errors for CRDs
Fixes patch errors for nodes when the watch cache has a persistently stale version of an object

Automatic merge from submit-queue.

Automated cherry pick of #65499: Removes defaulting of CSI fsType to ext4

Cherry pick of #65499 on release-1.10.

#65499: Removes defaulting of CSI fsType to ext4

Automatic merge from submit-queue.

Ensure /etc/hosts has a header always - Fix conformance test

We have 2 scenarios where we copy /etc/hosts
- with host network (we just copy the /etc/hosts from node)
- without host network (create a fresh /etc/hosts from pod info)

We are having trouble figuring out whether a /etc/hosts in a
pod/container has been "fixed-up" or not. And whether we used
host network or a fresh /etc/hosts in the various ways we start
up the tests which are:

- VM/box against a remote cluster
- As a container inside the k8s cluster
- DIND scenario in CI where test runs inside a managed container

Please see previous mis-guided attempt to fix this problem at
ba20e634 In this commit we revert
the code from there as well.

So we should make sure:
- we always add a header if we touched the file
- we add slightly different headers so we can figure out if we used the
  host network or not.

Update the test case to inject /etc/hosts from node to another path
(/etc/hosts-original) as well and use that to compare.



**What this PR does / why we need it**:

**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:
Fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
Rework Kubelet set `/etc/hosts` behavior to fix conformance testability
```

Automatic merge from submit-queue.

Automated cherry pick of #65926: Fix RunAsGroup.

Cherry pick of #65926 on release-1.10.

#65926: Fix RunAsGroup.

Signed-off-by: Lantao Liu <lantaol@google.com>

Automatic merge from submit-queue.

Automated cherry pick of #65987: Fix pod worker deadlock.

Cherry pick of #65987 on release-1.10.

#65987: Fix pod worker deadlock.

Automatic merge from submit-queue.

Automated cherry pick of #63270: remove format operation in WaitForAttach

Cherry pick of #63270 on release-1.10.

#63270: remove format operation in WaitForAttach

Adding generated files

Fixing comments in types.go

Automatic merge from submit-queue.

[1.10] gc: remove crd and apiservice from ignored resources

Fixes #65818

This PR cherry-picks CRD and APIService removal from GC ignored resources, from #65856 and #65915.

**Release note**:
```release-note
The garbage collector now supports CustomResourceDefinitions and APIServices.
```

/cc @nikhita @liggitt 
/sig api-machinery
/kind bug
/priority important-soon

Signed-off-by: Lantao Liu <lantaol@google.com>