Redirect /verify-auth(-azure)?/.* to /.*

[master] adding dnspolicy and tolerations to shell/helm

Problem: boot a cluster with only etcd and controlplane nodes, with no
worker coredns doesn't come up and the cluster-agent can not talk back
to the rancher server url and make the cluster accessible. additionally,
targeting for the shell fails due to taints.
Fix: Add dnspolicy default to the cluster-agent so when it boots it will
use the node's dns settings. Add tolerations to the shell/helmop for
controlplane nodes so the pods will assign and the tunnels will com up.

Updated CATTLE_MACHINE_VERSION to v0.15.0-rancher51

Add agent-install-script setting

Allow /meta/proxy to use any secret the user has GET access to

Add /cacerts route similar to k3s

Treat k3s derived distros as import so the SA account can be updated

[Forwardport] Conditionally disable rotateEncryptionKey action 

Remove experimental steve proxy feature flag code

Update vendor to fix JSON encoding schemas URL

[master] Vendor rke

Revert charts alt branches

Add rhel variable

Update ClusterRoleBinding to rbac.authorization.k8s.io/v1

[master] Prevent panic seen intermittently while logging in with SAML

refactor k3s to support swappable components

Update rke

* [2.5] switch to upstream saml library (#30858)

* switch to upstream saml library

* fixing go sum

* go mod tidy

[Forwardport] Restricted admin role changes

[master] adding back v1 node delete

Add support to docker 20.10 and set it as default install script