Automatic merge from submit-queue (batch tested with PRs 41672, 42084, 42233, 42165, 42273) Don't sync IPtables before underlying store/reflector is fully synced Ref #42108 Build on top of #42108 - only the second commit is unique.