Updated PIP in base image to align with Python Cryptography Framework version

[axsaucedo]

What this PR does / why we need it:

Which issue(s) this PR fixes:

Follow up fix from #2970 to ensure all python derivative images build as the pip package is not compatible with the newer version of the cryptography library. This also includes an update on the UPGRADING.md page.

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

[axsaucedo]

/test release

[seldondev]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign axsaucedo
You can assign the PR to them by writing /assign @axsaucedo in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[axsaucedo]

/test release

[seldondev]

@axsaucedo: The following test failed, say /retest to rerun them all:

Test name	Commit	Details	Rerun command
release-build-push	f62c45c	link	/test release

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the jenkins-x/lighthouse repository. I understand the commands that are listed here.

[axsaucedo]

Build and push script runs successfully - merging