Prepare for release v1.10.4

[joestringer]

Summary of Changes

Minor Changes:

• Auto-mount bpf file-system from within Cilium DaemonSet and remove the requirement of having it mounted in the host. (Backport PR v1.10 backports 2021-08-10 #17119, Upstream PR Add Bidirectional mount in Cilium DaemonSet #16656, @aanm)
• Cilium Envoy integration is updated to release 1.18.4. (1.10 backport for envoy: Update to release 1.18.4 #17200, @jrajahalme)

Bugfixes:

• Add '*.mesh.cilium.io' to the list of SANs for the server certificate of 'clustermesh-apiserver'. (Backport PR v1.10 backports 2021-08-10 #17119, Upstream PR Include '*.mesh.cilium.io' in 'clustermesh-apiserver''s server certificate. #17027, @bmcustodio)
• change log level for lock failed: endpoint is in the process of being removed (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR change log level for lock failed: endpoint is in the process of being removed #16773, @humancalico)
• datapath: panic explicitly when IP of direct-routing-device not found (Backport PR v1.10 backports 2021-08-18 #17183, Upstream PR datapath: panic explicitly when IP of direct-routing-device not found #17064, @ArthurChiao)
• Fix a crash where user specifies incorrect service name in a local redirect policy config, or policy selected service is added after the policy is added. (Backport PR v1.10 backports 2021-08-18 #17183, Upstream PR pkg/redirectpolicy: Make code robust against incorrect policy configu… #16216, @aditighag)
• Fix bug where timers used for retries sometimes fired immediately (Backport PR v1.10 backports 2021-07-28 #17011, Upstream PR inctimer: Fix bug where timer fired immediately #16955, @gandro)
• Fix Linux slave interface detection (Backport PR v1.10 backports 2021-08-23 #17216, Upstream PR Fix Linux slave interface detection #17189, @pchaigno)
• Fix transient policy deny during agent restart (Backport PR v1.10 backports 2021-08-23 #17216, Upstream PR policy: Fix transient policy deny during agent restart #17115, @jaffcheng)
• hubble/recorder: Refactor service implementation to fix multiple races (Backport PR v1.10 backports 2021-07-28 #17011, Upstream PR hubble/recorder: Refactor service implementation to fix multiple races #16472, @gandro)
• hubble: Never fail with ErrInvalidRead (Backport PR v1.10 backports 2021-08-18 #17183, Upstream PR hubble: Never fail with ErrInvalidRead #17046, @michi-covalent)
• policy: Fix cilium policy trace output when only deny rules are applied (Backport PR v1.10 backports 2021-08-10 #17119, Upstream PR policy: Fix cilium policy trace output when only deny rules are applied #16991, @chez-shanpu)
• Remove node.cilium.io/agent-not-ready node taints if they are re-added after Cilium has started (Backport PR v1.10 backports 2021-08-30 #17256, Upstream PR pkg/k8s: use a controller manager in K8sClient #17112, @aanm)
• routing: Fix incorrect interface selection for egress pod routes (Backport PR v1.10 backports 2021-08-18 #17183, Upstream PR routing: Fix incorrect interface selection for egress pod routes #17169, @pchaigno)

CI Changes:

• .github/workflows: use latest stable cilium-cli release (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR .github/workflows: use latest stable cilium-cli release #16892, @tklauser)
• .github: harden permissions on GH workflows (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR .github: harden permissions on GH workflows #16941, @aanm)
• .github: remove workflows triggered by comments (.github: remove workflows triggered by comments #16950, @aanm)
• hubble/relay: Fix close of closed channel in unit test (Backport PR v1.10 backports 2021-07-26 #16993, Upstream PR hubble/relay: Fix close of closed channel in unit test #16958, @gandro)
• node-neigh: Wait instead of sleeping in unit tests (Backport PR v1.10 backports 2021-08-10 #17119, Upstream PR node-neigh: Wait instead of sleeping in unit tests #17035, @aanm)
• test: Fix artifact collection for bad log failures (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR test: Fix artifact collection for bad log failures #16489, @pchaigno)
• test: Fix artifact collection for FQDN matchPattern test (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR test: Fix artifact collection for FQDN matchPattern test #16759, @pchaigno)
• test: Fix missing artifacts for tests with parentheses (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR test: Fix missing artifacts for tests with parentheses  #16540, @pchaigno)
• test: Spring cleaning of K8sServicesTest (Backport PR v1.10 backports 2021-06-22: test: Spring cleaning of K8sServicesTest #16630, Upstream PR test: Spring cleaning of K8sServicesTest #16470, @brb)
• workflows: use !success() for sysdump and Slack notifications (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR workflows: use !success() for sysdump and Slack notifications #16899, @nbusseneau)

Misc Changes:

• .github: add MLH config for flake tracking (.github: add MLH config for flake tracking #17041, @aanm)
• Avoid transitive dependency on github.com/miekg/dns in policy API (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR Avoid transitive dependency on github.com/miekg/dns in policy API #16806, @tklauser)
• backporting: Suggest only one related commit for a backport (Backport PR v1.10 backports 2021-07-28 #17011, Upstream PR backporting: Suggest only one related commit for a backport #16907, @joestringer)
• bpf: Remove duplicate define from MAX_BASE_OPTIONS (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR bpf: Remove duplicate define from MAX_BASE_OPTIONS #16911, @christarazi)
• build(deps): bump 8398a7/action-slack from 3.9.1 to 3.9.2 (build(deps): bump 8398a7/action-slack from 3.9.1 to 3.9.2 #16997, @dependabot[bot])
• build(deps): bump actions/setup-go from 2.1.3 to 2.1.4 (build(deps): bump actions/setup-go from 2.1.3 to 2.1.4 #17250, @dependabot[bot])
• build(deps): bump docker/build-push-action from 2.6.1 to 2.7.0 (build(deps): bump docker/build-push-action from 2.6.1 to 2.7.0 #17199, @dependabot[bot])
• build(deps): bump dorny/paths-filter from 2.10.1 to 2.10.2 (build(deps): bump dorny/paths-filter from 2.10.1 to 2.10.2 #16973, @dependabot[bot])
• build(deps): bump KyleMayes/install-llvm-action from 1.4.0 to 1.4.1 (build(deps): bump KyleMayes/install-llvm-action from 1.4.0 to 1.4.1 #16982, @dependabot[bot])
• contrib: Improve release script guard rails (Backport PR v1.10 backports 2021-07-26 #16993, Upstream PR contrib: Improve release script guard rails #16936, @joestringer)
• docs: Clarify SA target in KPR gsg (Backport PR v1.10 backports 2021-07-28 #17011, Upstream PR docs: Clarify SA target in KPR gsg #16954, @brb)
• docs: fix code-block formatting for XDP load example (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR docs: fix code-block formatting for XDP load example #16876, @claudiajkang)
• docs: Fix missing quote in gcloud command for GKE (Backport PR v1.10 backports 2021-08-10 #17119, Upstream PR docs: Fix missing quote in gcloud command for GKE #17014, @christarazi)
• docs: improve the bandwidth manager page (Backport PR v1.10 backports 2021-07-26 #16993, Upstream PR docs: improve the bandwidth manager page #16783, @bmcustodio)
• Improves the error logs during the bpf maps updating (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR Improves the error logs during the bpf maps updating #16034, @elfadel)
• install: Fix README links to getting started guides (Backport PR v1.10 backports 2021-08-10 #17119, Upstream PR install: Fix README links to getting started guides #16947, @joestringer)
• Makefile: fix typo in helper message (Backport PR v1.10 backports 2021-08-18 #17183, Upstream PR Makefile: fix typo in helper message #17128, @aanm)
• Misc. GH workflow improvements and hardness (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR Misc. GH workflow improvements and hardness #16908, @aanm)
• operator: misc. refactoring and code removal (Backport PR v1.10 backports 2021-08-10 #17119, Upstream PR operator: misc. refactoring and code removal #16918, @aanm)
• proxylib/test: fix data race between StartAccessLogServer and Close (Backport PR v1.10 backports 2021-08-23 #17216, Upstream PR proxylib/test: fix data race between StartAccessLogServer and Close #16298, @tklauser)
• proxylib: Fix data races in unit tests (Backport PR v1.10 backports 2021-08-23 #17216, Upstream PR proxylib: Fix data races in unit tests #17141, @gandro)
• Restrict Kubernetes access for hubble-relay (Backport PR v1.10 backports 2021-07-26 #16993, Upstream PR install/kubernetes: restrict k8s access for relay #16937, @jonkerj)
• v1.10: Update cilium base images (v1.10: Update cilium base images #17266, @joestringer)
• v1.10: Update Go to 1.16.7 (v1.10: Update Go to 1.16.7 #17124, @tklauser)
• vendor: Update k8s dependencies and tests to 1.21.3 (Backport PR v1.10 backports 2021-07-26 #16993, Upstream PR vendor: Update k8s dependencies and tests to 1.21.3 #16608, @christarazi)
• version, metrics: allow to build on non-unix platforms (Backport PR v1.10 backports 2021-07-21 #16960, Upstream PR version, metrics: allow to build on non-unix platforms #16679, @tklauser)

Other Changes:

• github: fix GH workflows to handle push events to stable branches (github: fix GH workflows to handle push events to stable branches #16979, @aanm)
• install: Update image digests for v1.10.3 (install: Update image digests for v1.10.3 #16901, @aanm)