Prepare for release v1.10.0-rc2

[aanm]

Summary of Changes

Major Changes:

• doc: New performance benchmarks and tuning guide (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR doc: New performance benchmarks and tuning guide #15943, @tgraf)

Minor Changes:

• daemon: Add wildcard support to --devices ("eth+") (Backport PR v1.10 backports 2021-04-28 #15919, Upstream PR daemon: Add wildcard support to --devices ("eth+") #15697, @joamaki)
• doc: Add more generic install section for egress gateway guide (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR doc: Add more generic install section for egress gateway guide #16087, @tgraf)
• doc: Reword some results (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR doc: Reword some results #15955, @tgraf)
• doc: Update diagrams in benchmark report (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR doc: Update diagrams in benchmark report #16063, @tgraf)
• Hubble logs for HTTP responses now include HTTP response headers. (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR envoy: Add response headers access logging #16013, @jrajahalme)
• images: Bump Hubble CLI to v0.8.0 (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR images: Bump Hubble CLI to v0.8.0 #15983, @gandro)
• install: Disable kube-proxy-replacement by default (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR install: Disable kube-proxy-replacement by default #15422, @tgraf)
• node-neigh: Locking, logging, misc improvements (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR node-neigh: Locking, logging, misc improvements #15783, @brb)
• Store the previous Cilium's configuration options in the host (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR daemon: store Cilium's configuration in a file #16017, @aanm)
• wireguard: Set wireguard and route MTU to detected MTU (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR wireguard: Set wireguard and route MTU to detected MTU #16020, @joamaki)

Bugfixes:

• cilium: Encryption EKS 4.14 kernel (default) fixes (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR cilium: Encryption EKS 4.14 kernel (default) fixes #15867, @jrfastab)
• Drop a @ in clustermesh-apiserver helm chart (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR Drop a @ in clustermesh-apiserver helm chart #15934, @anthr76)
• eni: Fix Cilium overallocating network interfaces (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR eni: Fix Cilium overallocating network interfaces #15911, @gandro)
• Envoy is updated to release 1.17.3 (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR envoy: Update Envoy to release 1.17.3 #16102, @jrajahalme)
• Fix 5.10+ complexity issue with kubeProxyReplacement=disabled (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR Fix 5.10+ complexity issue with kubeProxyReplacement=disabled #16084, @pchaigno)
• Fix aws-cni integration where pods were not being scheduled (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR plugins/cilium-cni: fix aws-cni cni chaining #15915, @aanm)
• Fix bug where L7 ingress policies with IPsec dropped traffic in tunneling mode (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR Add XFRM In policy for traffic destined to the L7 proxy #16057, @christarazi)
• ui envoy: fix config to keep grpc conn (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR ui envoy: fix config to keep grpc conn #15938, @geakstr)

CI Changes:

• ci-gke: Add -v=6 for kubectl get pods (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR ci-gke: Add -v=6 for kubectl get pods #15994, @michi-covalent)
• ci/wireguard: Ensure allowedIPs are set as expected (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR ci/wireguard: Ensure allowedIPs are set as expected #16011, @gandro)
• connectivity-check: Reduce chances of port conflict with proxy (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR connectivity-check: Reduce chances of port conflict with proxy #15988, @pchaigno)
• jenkinsfiles: fix race detector pipelines (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR jenkinsfiles: fix race detector pipelines #16056, @nbusseneau)
• node-neigh: Fix unit test flake (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR node-neigh: Fix unit test flake #16072, @brb)
• test/runtime: Wait for endpoints to be ready before querying by labels (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR test/runtime: Wait for endpoints to be ready before querying by labels #15990, @pchaigno)
• test: 5.4 CI job (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR test: 5.4 CI job #15765, @pchaigno)
• test: Extend the clusterIP tests with policy (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR test: Extend the clusterIP tests with policy #15928, @aditighag)
• test: Fix flake in ValidateEndpointsAreCorrect (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR test: Fix flake in ValidateEndpointsAreCorrect #16068, @pchaigno)
• test: Fix fragment tracking test on GKE (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR test: Fix fragment tracking test on GKE #15959, @pchaigno)
• test: Fix the search for VIPs in cilium service list (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR test: Fix the search for VIPs in cilium service list #15968, @pchaigno)
• test: Run WG with per-endpoint routes (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR test: Run WG with per-endpoint routes #15906, @brb)
• test: set kubeProxyReplacement=probe for upstream k8s tests (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR test: set kubeProxyReplacement=probe for upstream k8s tests #16162, @aanm)
• wireguard: Fix timeout in unit test (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR wireguard: Fix timeout in unit test #16001, @gandro)

Misc Changes:

• Add arm64 support for the connectivity test (Backport PR v1.10 backports 2021-04-28 #15919, Upstream PR examples/kubernetes: add arm64 support for connectivity check #15894, @aanm)
• build(deps): bump docker/login-action from f3364599c6aa293cdc2b8391b1b56d0c30e45c8a to 1.9.0 (build(deps): bump docker/login-action from f3364599c6aa293cdc2b8391b1b56d0c30e45c8a to 1.9.0 #15918, @dependabot[bot])
• build(deps): bump docker/setup-buildx-action from 012185ccbeb554a7f5f987bea0f1a73519b3cdf5 to 1.3.0 (build(deps): bump docker/setup-buildx-action from 012185ccbeb554a7f5f987bea0f1a73519b3cdf5 to 1.3.0 #15941, @dependabot[bot])
• build(deps): bump KyleMayes/install-llvm-action from 1.2.2 to 1.3.0 (build(deps): bump KyleMayes/install-llvm-action from 1.2.2 to 1.3.0 #16090, @dependabot[bot])
• bwm: queue mapping & cong fixes (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR bwm: queue mapping & cong fixes #15964, @borkmann)
• CODEOWNERS: add maintainers to be codeowners of .github (CODEOWNERS: add maintainers to be codeowners of .github #15925, @aanm)
• contrib: Ensure release tag is upstream before push (Backport PR v1.10 backports 2021-04-28 #15919, Upstream PR contrib: Ensure release tag is upstream before push #15903, @joestringer)
• contrib: Fix scripts for v1.10 (Backport PR v1.10 backports 2021-04-28 #15919, Upstream PR contrib: Fix scripts for v1.10 #15898, @joestringer)
• doc/encryption: improve consistency between ipsec and wireguard guides (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR doc/encryption: improve consistency between ipsec and wireguard guides #15965, @rolinh)
• doc: update Hubble/Hubble Relay guides for recent CLI changes (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR doc: update Hubble/Hubble Relay guides for recent CLI changes #15981, @rolinh)
• Dockerfile: use alpine 3.12 (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR Dockerfile: use alpine 3.12 #15950, @aanm)
• docs/ipsec: misc improvements (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR docs/ipsec: misc improvements #15978, @kaworu)
• docs: add 'endpointRoutes.enabled=true' to aws-cni (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR docs: add 'endpointRoutes.enabled=true' to aws-cni #16045, @bmcustodio)
• docs: add ids to the list of special identities (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR docs: add ids to the list of special identities #16123, @bmcustodio)
• docs: Add note about DNS-related policies on OpenShift (Backport PR v1.10 backports 2021-05-14 #16150, Upstream PR docs: Add note about DNS-related policies on OpenShift  #16083, @twpayne)
• docs: clustermesh: fix output of "cilium clustermesh status" command (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR docs: clustermesh: fix output of "cilium clustermesh status" command #15982, @jibi)
• docs: Fix egress gateway getting started guide (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR docs: Fix egress gateway getting started guide #15984, @gandro)
• docs: gsg/operations - use parsed-literal for all blocks referring SCM_WEB (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR docs: gsg/operations - use parsed-literal for all blocks referring SCM_WEB #15963, @ti-mo)
• docs: improve and fix minor issues (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR docs: improve and fix minor issues #15975, @qmonnet)
• docs: improve the aws-cni chaining page (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR docs: improve the aws-cni chaining page #15979, @bmcustodio)
• docs: minor improvements to tuning guide (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR docs: minor improvements to tuning guide #16024, @borkmann)
• docs: remove misplaced sentence from Quick Installation guide (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR docs: remove misplaced sentence from Quick Installation guide #15971, @lfundaro)
• docs: Some Wireguard improvements (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR docs: Some Wireguard improvements #16023, @brb)
• docs: tell how to deploy demo app in Hubble CLI guide (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR docs: tell how to deploy demo app in Hubble CLI guide #15973, @lfundaro)
• docs: update OpenShift getting started guide (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR docs: update OpenShift getting started guide #16006, @twpayne)
• docs: Update SIG-Datapath meeting time. (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR docs: Update SIG-Datapath meeting time. #16027, @joestringer)
• ebpf: delete existing pinned map if incompatible with the spec (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR ebpf: delete existing pinned map if incompatible with the spec #15832, @jibi)
• Encryption docs update (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR Encryption docs update #14940, @aditighag)
• Fix encryption getting started guides for v1.10 (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR Fix encryption getting started guides for v1.10 #15961, @jibi)
• Follow ups for host firewall support of endpoint routes (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR Follow ups for host firewall support of endpoint routes #15942, @pchaigno)
• issue_14922: Fixed the 429 response code handling (Backport PR v1.10 backports 2021-04-28 #15919, Upstream PR issue_14922: Fixed the 429 response code handling #15760, @Maddy007-maha)
• Minor fixes for OKD GSG (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR Minor fixes for OKD GSG #16000, @errordeveloper)
• node-neigh: Avoid flooding the same next hop (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR node-neigh: Avoid flooding the same next hop #15882, @brb)
• Update base images with most recent SHAs (Backport PR v1.10 backports 2021-04-28 #15919, Upstream PR Update base images with most recent SHAs #15895, @aanm)
• Update CI infrastructure for v1.10 release (Backport PR v1.10 backports 2021-04-28 #15919, Upstream PR Update CI infrastructure for v1.10 release #15947, @christarazi)
• Update weekly community meeting timeslot (Backport PR v1.10 backports 2021-05-07 #16049, Upstream PR Update weekly community meeting timeslot #15985, @joestringer)
• v1.10: Update Go to 1.16.4 (v1.10: Update Go to 1.16.4 #16061, @tklauser)
• vendor: bump github.com/vishvananda/netlink to latest master (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR vendor: bump github.com/vishvananda/netlink to latest master #16070, @tklauser)
• vendor: update wireguard library (Backport PR v1.10 backports 2021-05-12 #16103, Upstream PR vendor: update wireguard library #16066, @aanm)

Other Changes:

• install: Update image digests for v1.10.0-rc1 (install: Update image digests for v1.10.0-rc1 #15904, @joestringer)
• workflows: fix image workflows for v1.10 (workflows: fix image workflows for v1.10 #16009, @nbusseneau)