Prepare for release v1.10.13

[joestringer]

Summary of Changes

Major Changes:

• add support for AKS BYOCNI (Backport PR v1.10 backports 2022-07-13 #20509, Upstream PR add support for AKS BYOCNI #19379, @nbusseneau)

Minor Changes:

• Add metric on datapath update latency due to FQDN IP updates (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR Add metric on datapath update latency due to FQDN IP updates #19992, @rahulkjoshi)
• IPSec key rotation without agent restart (Backport PR [v1.10] IPSec key rotation without agent restart #20127, Upstream PR IPSec key rotation without agent restart #19814, @jibi)
• v1.10: helm: disable the peer service by default (v1.10: helm: disable the peer service by default #20290, @rolinh)

Bugfixes:

• node-init now takes enableIPv4Masquerade into account on GKE. (Backport PR v1.10 backports 2022-07-13 #20509, Upstream PR Use '.Values.enableIPv4Masquerade' in 'node-init' #19533, @bmcustodio)
• bug: Fixed a rare CiliumIdentity race deletion. (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR bug: Prevent CiliumIdentities from Being Deleted Improperly #19936, @nathanjsweet)
• cilium: fix conflicting iptables-legacy and iptables-nft rules (Backport PR [v1.10] cilium: fix inconsistent iptables and nft usage #20139, Upstream PR cilium: fix conflicting iptables-legacy and iptables-nft rules #20123, @jrfastab)
• Consider VPC's secondary CIDRs during cilium_host IP restoration (Backport PR [v1.10] Consider VPC's secondary CIDRs during cilium_host IP restoration #20395, Upstream PR Consider VPC's secondary CIDRs during cilium_host IP restoration #19341, @hemanthmalla)
• daemon: Fix issue where stale router IPs were not cleaned up (Backport PR v1.10 backports 2022-07-13 #20509, Upstream PR daemon: Fix issue where stale router IPs were not cleaned up #20389, @gandro)
• datapath: Fix security ID propagation in tunnel header for NodePort BPF forwarded requests (Backport PR backport v1.10: datapath: Set WORLD_ID in fwd-ed NodePort BPF requests #20327, Upstream PR datapath: Fix security ID propagation in tunnel header for NodePort BPF forwarded requests #19061, @brb)
• Fix agent panic in some cases when service matcher local redirect policy was deployed prior to the selected service. (Backport PR v1.10 backports 2022-06-13 #20179, Upstream PR redirectpolicy: Fix panic in service matcher LPR processing #19522, @aditighag)
• Fix Azure IPAM 403 errors for Azure instances using Azure Compute Gallery images (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR Unset ImageReference when updating Azure VMSS #19697, @andrew-bulford-form3)
• Fixed SystemD >=245 sysctl(rp_filter) config incompatibility (Backport PR datapath: Backport create sysctl rp_filter overwrite config on agent init #20232, Upstream PR datapath: Create sysctl rp_filter overwrite config on agent init #20072, @dylandreimerink)
• helm: Fix cluster-id arguments in clustermesh deployment (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR helm: Fix cluster-id arguments in clustermesh deployment #20312, @sayboras)
• ipsec: fix stale keys reclaim logic (Backport PR [v1.10] IPSec key rotation without agent restart #20127, Upstream PR ipsec: fix stale keys reclaim logic #19932, @jibi)
• iptables: ensure all rules are installed consistently (Backport PR #19693 v1.10 backport #19914, Upstream PR iptables: ensure all rules are installed consistently #19693, @jibi)
• iptables: fix typo in addProxyRule condition (Backport PR #19693 v1.10 backport #19914, Upstream PR iptables: fix typo in addProxyRule condition #20109, @jibi)
• nodediscovery: ensure we cache the nodeResource correctly to avoid null pointer dereferencing (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR nodediscovery: ensure we cache the nodeResource  #20158, @odinuge)
• nodediscovery: make LocalNode return a deep copy of localNode (Backport PR [v1.10] IPSec key rotation without agent restart #20127, Upstream PR nodediscovery: make LocalNode return a deep copy of localNode #20392, @jibi)

CI Changes:

• ci: provide CI images with unstripped binaries (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR ci: provide CI images with unstripped binaries #20238, @tklauser)
• docs: Bump up Netlify Python version to 3.8 (Backport PR v1.10 backports 2022-07-13 #20509, Upstream PR docs: Bump up Netlify Python version to 3.8 #20486, @michi-covalent)
• jenkinsfiles: fix docker manifest inspect commands in GKE pipeline (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR jenkinsfiles: fix docker manifest inspect commands in GKE pipeline #20325, @tklauser)

Misc Changes:

• [docs] Add training and support information to Getting Help (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR [docs] Add training and support information to Getting Help #20194, @lizrice)
• Add a note about conflicting node CIDRs [Docs] By default Cilium doesn't work if node is in 10.0.0.0/24 network #20204 (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR Add a note about conflicting node CIDRs #20204 #20208, @wokalski)
• Add ESP to firewall requirements in documentation for IPSec enabled C… (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR Add ESP to firewall requirements in documentation for IPSec enabled C… #20314, @Kikiodazie)
• Add Peer Service to Cilium DS Port List (Backport PR v1.10 backports 2022-07-13 #20509, Upstream PR Add Peer Service to Cilium DS Port List #20296, @nathanjsweet)
• build(deps): bump actions/cache from 3.0.4 to 3.0.5 (build(deps): bump actions/cache from 3.0.4 to 3.0.5 #20496, @dependabot[bot])
• build(deps): bump actions/setup-go from 3.2.0 to 3.2.1 (build(deps): bump actions/setup-go from 3.2.0 to 3.2.1 #20464, @dependabot[bot])
• build(deps): bump helm/kind-action from 1.2.0 to 1.3.0 (build(deps): bump helm/kind-action from 1.2.0 to 1.3.0 #20200, @dependabot[bot])
• ctmap: Do not use nil locks (Backport PR v1.10 backports 2022-07-13 #20509, Upstream PR ctmap: Do not use nil locks #20388, @jrajahalme)
• datapath: Always use of wait argument on iptables commands. (Backport PR #19693 v1.10 backport #19914, Upstream PR datapath: Always use of wait argument on iptables commands. #17593, @jrajahalme)
• docs(policy): add notes on DNS/L7 policies & Cilium agent availability (Backport PR v1.10 backports 2022-06-28 #20330, Upstream PR docs(policy): add notes on DNS/L7 policies & Cilium agent availability #20289, @raphink)
• docs: Document clustermesh datapath configuration for non-tunneled modes (Backport PR v1.10 backports 2022-07-13 #20509, Upstream PR docs: Document clustermesh datapath configuration for non-tunneled modes #16499, @jrajahalme)
• docs: Improve policy troubleshooting guide (Backport PR v1.10 backports 2022-07-13 #20509, Upstream PR docs: Improve policy troubleshooting guide #20399, @joestringer)

Other Changes:

• install: Update image digests for v1.10.12 (install: Update image digests for v1.10.12 #20222, @joestringer)
• update k8s versions to the latest releases (update k8s versions to the latest releases #20514, @aanm)
• v1.10: update cilium-{runtime,builder} (v1.10: update cilium-{runtime,builder} #20541, @joestringer)