Prepare for release v1.12.5

[joestringer]

Prepare for release v1.12.5

Summary of Changes

Minor Changes:

• bpf: Implement downgrading path from v3 to v2 backend map (bpf: Implement downgrading path from v3 to v2 backend map #22416, @YutaroHayakawa)

Bugfixes:

• Clear stale CNP status nodes if updates have been disabled (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR Clear stale CNP status nodes if updates have been disabled #20366, @pippolo84)
• docs: Update Cilium Sphinx RTD Theme reference (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR docs: Update Cilium Sphinx RTD Theme reference #22321, @kimstacy)
• Fail validate-cnp preflight check if a CiliumClusterwideNetworkPolicy is using an empty toEndpoints/fromEndpoints selector (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR fix: Fail CCNP preflight check if using empty endpoint selectors #21990, @thorn3r)
• Fix bug that could lead to inconsistent pod IP information between agents, sometimes leading to a failure to decrypt IPsec traffic. (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR pkg/k8s: do not read k8s node annotations if they are not written #22127, @aanm)
• Fix bug where configuring the API rate limiter options could fail when providing multiple options (Backport PR v1.12 backport: fix multi-option parsing #22696, Upstream PR fix: enable parsing of multi-option 'key:value's for config options #22299, @thorn3r)
• Fix Cilium fatal "Could not create or update CiliumNode resource, despite retries" on environments with enable-ipv4-egress-gateway (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR pkg/k8s: fallback on retrieving CiliumNode from kube-apiserver #22298, @aanm)
• Fix forwarding of the security identity by the DNS proxy which could cause random policy denials (Backport PR v1.12 backports 2022-11-28 #22407, Upstream PR fqdn: dnsproxy: fix forwarding of the original security identity #22361, @aspsk)
• Fix GC of CEPs that were not GCed by kube-apiserver (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR operator: fix CEP GC #22213, @aanm)
• fix: some tofqdn flags not being parsed (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR fix: some tofqdn flags not being parsed #22346, @carloscastrojumo)
• helm: Add relabelings config to ServiceMonitors and re-introduce node label on cilium/hubble metrics (Backport PR v1.12 Backport: servicemonitor relabelings #22506, Upstream PR helm: Add relabelings config to ServiceMonitors #22297, @chancez)
• Improve garbage collection for FQDNs particularly with high-churn IP names such as Amazon S3. (Backport PR [v1.12] fqdn: Fix GC for dead IPs on live names over limit #22730, Upstream PR fqdn: Fix GC for dead IPs on live names over limit #22510, @joestringer)
• Prevent cilium operator crash in AWS region with IPv6-only ENIs without subnet filters. (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR aws/eni: fix cilium operator crash on IPv6 ENI #22075, @bimmlerd)

CI Changes:

• .github: Explicitly set build-commits job runner image version and install libtinfo5 (Backport PR v1.12 backports 2022-11-23 #22328, Upstream PR .github: Explicitly set build-commits job runner image version and install libtinfo5 #22315, @chancez)
• .github: fix bpf-checks on ubuntu-latest runner (Backport PR v1.12 backports 2022-11-23 #22328, Upstream PR .github: fix bpf-checks on ubuntu-latest runner #22322, @julianwiedmann)
• Fix CODEOWNERS (Fix CODEOWNERS #22292, @michi-covalent)

Misc Changes:

• .github/workflows: split the image tag update in two steps (Backport PR [v1.12] backport of 22179 #22260, Upstream PR .github/workflows: split the image tag update in two steps #22268, @aanm)
• Add automatic creation of Cilium base images (Backport PR [v1.12] backport of 22179 #22260, Upstream PR Add automatic creation of Cilium base images #22179, @aanm)
• bpf: Remove FIB lookup for IPsec (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR bpf: Remove FIB lookup for IPsec #22069, @pchaigno)
• build(deps): bump actions/setup-go from 3.3.1 to 3.4.0 (build(deps): bump actions/setup-go from 3.3.1 to 3.4.0 #22486, @dependabot[bot])
• build(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (build(deps): bump actions/setup-go from 3.4.0 to 3.5.0 #22715, @dependabot[bot])
• build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 (build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 #22271, @dependabot[bot])
• build(deps): bump github/codeql-action from 2.1.32 to 2.1.35 (build(deps): bump github/codeql-action from 2.1.32 to 2.1.35 #22497, @dependabot[bot])
• build(deps): bump github/codeql-action from 2.1.35 to 2.1.36 (build(deps): bump github/codeql-action from 2.1.35 to 2.1.36 #22632, @dependabot[bot])
• build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 (build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 #22716, @dependabot[bot])
• build(deps): bump KyleMayes/install-llvm-action from 1.6.0 to 1.6.1 (build(deps): bump KyleMayes/install-llvm-action from 1.6.0 to 1.6.1 #22595, @dependabot[bot])
• chore(deps): update base-images (v1.12) (chore(deps): update base-images (v1.12) #22167, @renovate[bot])
• chore(deps): update docker.io/library/golang:1.18.8 docker digest to 0936e74 (v1.12) (chore(deps): update docker.io/library/golang:1.18.8 docker digest to 0936e74 (v1.12) #22198, @renovate[bot])
• chore(deps): update docker.io/library/golang:1.18.9 docker digest to c492f6b (v1.12) (chore(deps): update docker.io/library/golang:1.18.9 docker digest to c492f6b (v1.12) #22728, @renovate[bot])
• daemon/cmd: Fix error handling for getting proxy port (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR daemon/cmd: Fix error handling for getting proxy port #22296, @christarazi)
• doc: add section to show how to customize cilium-agent metrics (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR doc: add section to show how to customize cilium-agent metrics #22178, @ArthurChiao)
• docs: add instructions to build the base images from external forks (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR docs: add instructions to build the base images from external forks #22304, @aanm)
• docs: clarifications about CNCF maintainer status (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR docs: clarifications about CNCF maintainer status #22351, @lizrice)
• docs: Clarify wildcards and subdomains in FQDN policies (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR docs: Clarify wildcards and subdomains in FQDN policies #22206, @felfa01)
• docs: describe Cilium Feature Proposals (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR docs: describe Cilium Feature Proposals #22443, @lizrice)
• docs: Fix kubectl create output in docs after some deployments have moved from K8s "extensions" to "apps". (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR docs: fix deployment resource type output #22002, @cleverhu)
• docs: update roadmap for graduation application (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR docs: update roadmap for graduation application #22422, @xmulligan)
• fix 'egressIP' field indentation (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR fix 'egressIP' field indentation #22303, @yulng)
• gha: Pin ubuntu-20.04 for conformance-test-ipv6 (Backport PR v1.12 backports 2022-11-23 #22328, Upstream PR gha: Pin ubuntu-20.04 for conformance-test-ipv6 #22324, @sayboras)
• Google Season of Docs is now over so it is removed from the docs (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR docs: Remove Google Season of Docs #22442, @xmulligan)
• Include DeleteNetworkInterface in ENI Required Privileges Docs (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR Include DeleteNetworkInterface in ENI Required Privileges Docs #20472, @espringsteen)
• k8s: don't consider 4xx a successful interaction (Backport PR v1.12 Backports 2022-12-01 #22500, Upstream PR k8s: don't consider 4xx a successful interaction #22393, @bimmlerd)
• mtu, node: fix build on all non-linux platforms (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR mtu, node: fix build on all non-linux platforms #22232, @tklauser)
• pkg/datapath: return specific error message (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR pkg/datapath: return specific error message #22137, @aanm)
• Update documentation related to metrics; fix incorrect FQDN metrics reference (Backport PR v1.12 backports 2022-11-22 #22308, Upstream PR Update documentation related to metrics; fix incorrect FQDN metrics reference #22300, @christarazi)
• v1.12: Update Go to 1.18.9 (v1.12: Update Go to 1.18.9 #22599, @tklauser)

Other Changes:

• install: Update image digests for v1.12.4 (install: Update image digests for v1.12.4 #22238, @michi-covalent)
• v1.12: Update k8s versions in tests and vendored libraries (v1.12: Update k8s versions in tests and vendored libraries #22581, @tklauser)

[joamaki]

Failing smoke test is #22774. Prior tests OK. Merging.