v1.11 backports 2022-01-11

[pchaigno]

Only backporting simple changes that don't require end-to-end tests, mostly to pick #18443.

• docs: Fix incorrect mention of bpf.masquerade's default value #18420 -- docs: Fix incorrect mention of bpf.masquerade's default value (@pchaigno)
• docs: Document the kube-apiserver entity #18396 -- docs: Document the kube-apiserver entity (@christarazi)
• docs: Replace janitors team with tophat team #18430 -- docs: Replace janitors team with tophat team (@pchaigno)
  • Minor conflicts.
• Clarify identity generated from CIDR-based policies and add security identity internal docs #16716 -- Clarify identity generated from CIDR-based policies and add security identity internal docs (@christarazi)
• ci: use python3 instead of python #18443 -- ci: use python3 instead of python (@nebril)

Skipped:

• Add basic kube-apiserver policy matching e2e test  #18333 -- Add basic kube-apiserver policy matching e2e test (@christarazi)

Once this PR is merged, you can update the PR labels via:

$ for pr in 18420 18396 18430 16716 18443; do contrib/backporting/set-labels.py $pr done 1.11; done