MinIO: Bugfix Release

## Highlights - Click [here](https://min.io/download) to download the latest version of MinIO. - Click [here](https://min.io/pricing) for production support. - Similar to release [RELEASE.2021-11-24T23-19-33Z](https://github.com/minio/minio/releases/RELEASE.2021-11-24T23-19-33Z). **Downgrades are not supported in this release** for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to the previous release. Please upgrade **staging** or **testing** environments first. - Adds support for RoleARN for OIDC Identity Configuration. Refer #13651 - Fixes erasure coded byte padding error fixed which leads to incorrect shard (when the shard to be replaced is the last shard) - Refer #13803. - Add support for adding new site(s) to site replication. Refer #13696 - Listing performance improvement. Refer #13723 - Other miscellaneous bug fixes in Automatic Site Replication feature, S3 Compatibility improvements in delete-marker behavior on directories, Hadoop S3A regression tests support, Disk Caching. ## What's Changed * Fix s3zip in FS mode by @klauspost in https://github.com/minio/minio/pull/13758 * Add new `site` config sub-system intended to replace `region` by @donatello in https://github.com/minio/minio/pull/13672 * Add role ARN support for OIDC identity provider by @donatello in https://github.com/minio/minio/pull/13651 * fix: totalDrives reported in speedTest for multiple-pools by @harshavardhana in https://github.com/minio/minio/pull/13770 * add configurable 'shutdown-timeout' for HTTP server by @harshavardhana in https://github.com/minio/minio/pull/13771 * Move IAM notifications into IAM system functions by @donatello in https://github.com/minio/minio/pull/13780 * disable CI for draft PRs by @krisis in https://github.com/minio/minio/pull/13784 * Fix panic when input cannot be parsed by @klauspost in https://github.com/minio/minio/pull/13791 * cache: in writeback mode skip etag verification by @poornas in https://github.com/minio/minio/pull/13781 * Add support for adding new site(s) to site replication by @poornas in https://github.com/minio/minio/pull/13696 * Fix dockerfile.dev to create /opt/bin first by @poornas in https://github.com/minio/minio/pull/13794 * Added the service account to deloyments and statefulset by @vinzenzs in https://github.com/minio/minio/pull/13790 * add delete-marker proactively in DeleteObject() by @harshavardhana in https://github.com/minio/minio/pull/13795 * reload certs from disk upon SIGHUP by @harshavardhana in https://github.com/minio/minio/pull/13792 * fix: do not ignore delete-marker directories in ListObjects() by @harshavardhana in https://github.com/minio/minio/pull/13804 * Fix panic (not fatal) on connection drops by @klauspost in https://github.com/minio/minio/pull/13811 * Improve listing consistency with version merging by @klauspost in https://github.com/minio/minio/pull/13723 * fix: use consistent ports in verify-healing by @harshavardhana in https://github.com/minio/minio/pull/13813 * cleanup site-replication docs by @harshavardhana in https://github.com/minio/minio/pull/13812 * If role policy is configured, require that role ARN be set in STS by @donatello in https://github.com/minio/minio/pull/13814 * fix: throw appropriate errors when all disks fail by @harshavardhana in https://github.com/minio/minio/pull/13820 * fix padding error and compatible with uploaded objects by @jiangfucheng in https://github.com/minio/minio/pull/13803 * Introduce new config `subnet api_key` by @anjalshireesh in https://github.com/minio/minio/pull/13793 * Ensure that role ARNs don't collide by @donatello in https://github.com/minio/minio/pull/13817 * jwt: Parse standard claims faster by @klauspost in https://github.com/minio/minio/pull/13821 * Add single drive support for directory prefixes in Listing by @harshavardhana in https://github.com/minio/minio/pull/13829 * return appropriate errors upon parseErrors by @harshavardhana in https://github.com/minio/minio/pull/13831 * fix: kms-id header should have arn:aws:kms: prefix by @harshavardhana in https://github.com/minio/minio/pull/13833 * validate if cached value is empty before use by @harshavardhana in https://github.com/minio/minio/pull/13830 * isMultipart to test on parts sizes only if object is encrypted by @vadmeste in https://github.com/minio/minio/pull/13839 * Better error msg when version mismatch of internode API by @vadmeste in https://github.com/minio/minio/pull/13845 * snowball: return errors on failures by @klauspost in https://github.com/minio/minio/pull/13836 * Fix LDAP service account creation by @donatello in https://github.com/minio/minio/pull/13849 * fix: potential crash in diskCache when fileScorer is empty by @harshavardhana in https://github.com/minio/minio/pull/13850 * fix: speedtest should exit upon errors cleanly by @harshavardhana in https://github.com/minio/minio/pull/13851 * add verification tests for ETag on replicated content by @harshavardhana in https://github.com/minio/minio/pull/13857 * fix: site replication issues and add tests by @harshavardhana in https://github.com/minio/minio/pull/13861 * Avoid cache GC of writebacks before commit syncs by @poornas in https://github.com/minio/minio/pull/13860 * fix: do not list delete-marked objects by @harshavardhana in https://github.com/minio/minio/pull/13864 ## New Contributors * @vinzenzs made their first contribution in https://github.com/minio/minio/pull/13790 **Full Changelog**: https://github.com/minio/minio/compare/RELEASE.2021-11-24T23-19-33Z...RELEASE.2021-12-09T06-19-41Z