Bump Kubernetes to v1.27

[twz123]

Tracking issue, things to be done:

• Ship quay.io/k0sproject/kube-proxy:v1.27.0
  • k0sproject/image-builder#25
  • k0sproject/image-builder#27
  • k0sproject/image-builder#29
• Have a Helm version that's compatible with the Kubernetes 1.27 client libraries
  • Opened the draft PR Bump k8s.io deps from v0.26.0 to v0.27.0 helm/helm#11894. Seems to be working so far.
  • Using https://github.com/k0sproject/helm/releases/tag/v3.11.3%2Bk0s.0
• Have a controller-runtime version that's compatible with the Kubernetes 1.27 client libraries
  • Currently using master, which has 🐛 Add cross-version compatibility with client-go 1.27 kubernetes-sigs/controller-runtime#2223 merged.
• Check for any API version removals
  • Any removals should be added to static/misc/api-resources.yaml.
  • Add 1.27.0 API removals #2999
• Check out how to properly build static Kubernetes binaries without breaking CGO
  The proper way of building static Kubernetes binaries seems to be using the KUBE_STATIC_OVERRIDES environment variable. To my current understanding, this disables CGO altogether. This might backfire for FIPS builds.
  Properly forward CGO settings into Kubernetes build #2910
• Adjust nodeutil.GetHostname imports
• Migrate from --container-runtime-endpoint kubelet flag to KubeletConfiguration.ContainerRuntimeEndpoint kubelet configuration field
• Properly check for required key usages when approving node certificates
  The "key encipherment" usage is only required when using RSA keys, which the kubelet doesn't by default. Kubernetes 1.27 will no longer request that usage for node certificates if not using RSA keys.
  • Use upstream validation logic for kubelet serving CSRs #3001
• Get the panic on ARMv7 fixed
  • Bump Kubernetes to v1.27.1 #2880 (comment)
  • Properly align synctrack.SingleFileTracker struct kubernetes/kubernetes#116477
• Have a closer look at Webhook framework for cloud controller manager kubernetes/kubernetes#108838 and if k0s needs to do something about that.
  • Simplify cloud provider controller manager setup #2916
• Check out KEP-3638: Improve kubectl plugin resolution for non-shadowing subcommands and what it means for k0s kc. @kke
  • Restructure kubectl plugin execution #2994