Prepare for release v1.11.3

[aanm]

Summary of Changes

Minor Changes:

• Adds support to connect Clustermesh clusters through Helm Chart. (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR Add support to connect Clustermesh clusters through Helm Chart #17851, @samueltorres)
• docs: update Azure Service Principal / IPAM documentation (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR docs: update Azure Service Principal / IPAM documentation #18891, @nbusseneau)
• Fixes L7 policies with Azure CNI chaining. (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR [Docs] Update docs to use enable endpoint route Azure cni #19088, @nitishm)

Bugfixes:

• Add missing & fix wrong traces for IPSec + overlay receive path (Backport PR v1.11 backports 2022-02-23 #18905, Upstream PR ipsec: Add/Fix packet tracing for overlay mode #18731, @YutaroHayakawa)
• Avoid deleting in-use program arrays in bpf_load() and bpf_load_cgroups() in init.sh (Backport PR v1.11 backport: Avoid unpinning in-use prog arrays in init.sh (K8sUpdates fix attempt) #19066, Upstream PR Avoid unpinning in-use prog arrays in init.sh #18985, @ti-mo)
• Cilium monitor now correctly reports security identities for L7 flows. (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR accesslog: Pass destination identity from L7 proxies to access logs #18783, @jrajahalme)
• clustermesh: fix: identities allocation range (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR clustermesh: fix: identities allocation range #19076, @abocim)
• clustermesh: Modify shared-service annotation after creation (Backport PR v1.11 backports 2022-02-23 #18905, Upstream PR clustermesh: Modify shared-service annotation after creation #18766, @sayboras)
• datapath/config: Fix L2 addr retrieval (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR datapath/config: Fix L2 addr retrieval #19081, @brb)
• Fix 'node-init' in GKE's 'cos' images. (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR Fix 'node-init' in GKE's 'cos' images. #19017, @bmcustodio)
• Fix a bug where Cilium would constantly create network interfaces if IPAM limits are reached (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR cilium-cni: Call IPAMAllocate before creating veth #18975, @michi-covalent)
• Fix bug where FQDN policy calculation could trigger a deadlock in cilium-agent (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR selectorcache: Move identity alloc/release outside of critical section #19031, @joestringer)
• Fix bug where unnecessary ipset was created and populated in tunneling mode with iptables masquerading. (Backport PR v1.11 backports 2022-02-23 #18905, Upstream PR iptables,option,node: Consistent condition for ipset usage #18788, @pchaigno)
• Fix concurrency issue while waiting for node-init DaemonSet to be ready (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR helm: check for contents of bootstartFile #18897, @aanm)
• Fix connectivity outage periods with ENI IPAM mode and IPsec enabled when nodes are deleted from the cluster (Backport PR v1.11 backports 2022-02-23 #18905, Upstream PR pkg/datapath/linux: Fix asymmetric IPsec logic on delete #18827, @christarazi)
• Fix IPsec in Azure's IPAM mode (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR Fix IPsec in Azure's IPAM mode #18911, @pchaigno)
• Fix issue where StatefulSet pod restarts could trigger persistent connectivity issues for the pods due to overzealous CiliumEndpoint resource removal by cilium-agent instances (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR Prevent CiliumEndpoint removal by non-owning agent #18864, @timoreimann)
• Fix support of BPF-based HostPort on init containers. (Backport PR v1.11 backports 2022-02-23 #18905, Upstream PR watchers: Support hostPort for init containers #18725, @pchaigno)
• Fixed a bug where deleted identities would remain in BPF policy maps. (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR Policy fix mapstate owners #19005, @jrajahalme)
• helm: Removed unnecessary Kubernetes RBAC permissions for cilium-agent (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR helm: Remove Unnecessary RBAC Permissions for Agent #19053, @nathanjsweet)
• hubble: Added nil check in filterByTCPFlags() to avoid segfault (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR hubble: Added nil check in filterByTCPFlags() to avoid segfault #18877, @wazir-ahmed)

CI Changes:

• jenkinsfiles: bump runtime tests VM boot timeout (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR jenkinsfiles: bump runtime tests VM boot timeout #18886, @nbusseneau)
• test: Wait until host EP is ready (=regenerated) (Backport PR v1.11 backports 2022-02-23 #18905, Upstream PR test: Wait until host EP is ready (=regenerated) #18859, @brb)

Misc Changes:

• Add support for Amazon EC2 c7g instances (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR Add Amazon EC2 c7g instance configuration #18708, @otterley)
• bpf: Remove DNS quirk for monitor aggregation (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR bpf: Remove DNS quirk for monitor aggregation #19108, @borkmann)
• build(deps): bump actions/cache from 2.1.7 to 3 (build(deps): bump actions/cache from 2.1.7 to 3 #19212, @dependabot[bot])
• build(deps): bump actions/checkout from 2.4.0 to 3 (build(deps): bump actions/checkout from 2.4.0 to 3 #18997, @dependabot[bot])
• build(deps): bump actions/download-artifact from 2.1.0 to 3 (build(deps): bump actions/download-artifact from 2.1.0 to 3 #19011, @dependabot[bot])
• build(deps): bump actions/setup-go from 2.2.0 to 3 (build(deps): bump actions/setup-go from 2.2.0 to 3 #18966, @dependabot[bot])
• build(deps): bump actions/upload-artifact from 2.3.1 to 3 (build(deps): bump actions/upload-artifact from 2.3.1 to 3 #19029, @dependabot[bot])
• build(deps): bump docker/build-push-action from 2.9.0 to 2.10.0 (build(deps): bump docker/build-push-action from 2.9.0 to 2.10.0 #19150, @dependabot[bot])
• build(deps): bump docker/login-action from 1.13.0 to 1.14.0 (build(deps): bump docker/login-action from 1.13.0 to 1.14.0 #18963, @dependabot[bot])
• build(deps): bump docker/login-action from 1.14.0 to 1.14.1 (build(deps): bump docker/login-action from 1.14.0 to 1.14.1 #18998, @dependabot[bot])
• build(deps): bump github/codeql-action from 1.1.2 to 1.1.3 (build(deps): bump github/codeql-action from 1.1.2 to 1.1.3 #18931, @dependabot[bot])
• build(deps): bump github/codeql-action from 1.1.3 to 1.1.4 (build(deps): bump github/codeql-action from 1.1.3 to 1.1.4 #19085, @dependabot[bot])
• build(deps): bump github/codeql-action from 1.1.4 to 1.1.5 (build(deps): bump github/codeql-action from 1.1.4 to 1.1.5 #19161, @dependabot[bot])
• build(deps): bump golangci/golangci-lint-action from 2.5.2 to 3 (build(deps): bump golangci/golangci-lint-action from 2.5.2 to 3 #18948, @dependabot[bot])
• build(deps): bump golangci/golangci-lint-action from 2.5.2 to 3.1.0 (build(deps): bump golangci/golangci-lint-action from 2.5.2 to 3.1.0 #18961, @dependabot[bot])
• build(deps): bump KyleMayes/install-llvm-action from 1.5.0 to 1.5.1 (build(deps): bump KyleMayes/install-llvm-action from 1.5.0 to 1.5.1 #18947, @dependabot[bot])
• docs: fix tip about opening the Hubble server port on all nodes (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR docs: fix tip about opening the Hubble server port on all nodes #19036, @rolinh)
• docs: Remove trailing step in AWS helm install (Backport PR v1.11 backports 2022-02-23 #18905, Upstream PR docs: Remove trailing step in AWS helm install #18893, @joestringer)
• helm: Enable offline deployments for OpenShift clusters (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR install/helm: Add Image Override Option to All Images #18849, @nathanjsweet)
• Makefile: Fix TESTPKGS commandline (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR Makefile: Fix TESTPKGS commandline #19100, @joestringer)
• pkg/maps: Fix data races around accessing nat maps (Backport PR v1.11 backports 2022-03-15 #19142, Upstream PR pkg/maps: Fix data races around accessing nat maps #18952, @aditighag)
• v1.11: Update Go to 1.17.8 (v1.11: Update Go to 1.17.8 #19059, @tklauser)

Other Changes:

• install: Update image digests for v1.11.2 (install: Update image digests for v1.11.2 #18927, @joestringer)
• v1.11 backport: manual backport of "Recommend 'NoExecute' instead of 'NoSchedule'" (v1.11 backport: manual backport of "Recommend 'NoExecute' instead of 'NoSchedule'" #19143, @bmcustodio)
• v1.11 backport: manual backport of "test: Restructure k8sT/Services.go" (v1.11 backport: manual backport of "test: Restructure k8sT/Services.go" #18881, @brb)
• v1.11: Update Cilium runtime dependencies (v1.11: Update Cilium runtime dependencies #19179, @joestringer)