Prepare for release v1.12.10

[thorn3r]

Summary of Changes

Minor Changes:

• sysdump: Added Kubernetes CNI logs to sysdump. (Backport PR v1.12 Backports 2023-05-10 #25348, Upstream PR Gather cni logs in bugtool. #23937, @marseel)
• Update CNI (loopback) to 1.3.0 (Backport PR [v1.12] Update CNI to 1.3.0 #25433, Upstream PR Update CNI to 1.3.0 #25400, @anfernee)

Bugfixes:

• Address cilium-agent startup performance regression. (Backport PR [v1.12] Author backport of "Address ipcache startup perfomance regression" #25190, Upstream PR Address ipcache startup perfomance regression #25007, @bimmlerd)
• datapath: Fix double SNAT (Backport PR v1.12 Backports 2023-05-03 #25248, Upstream PR datapath: Fix double SNAT #25189, @brb)
• DNS proxy now always updates the proxy policy to avoid intermittent policy drops. (Backport PR v1.12 Backports 2023-05-10 #25348, Upstream PR endpoint: Always compute proxy policies after DNS proxy updates #25147, @jrajahalme)
• Filter ipv6 advertisements when using metallb as BGP speaker. (Backport PR v1.12 backports 2023-04-26 #25138, Upstream PR bgp: do not advertise ipv6 prefixes via metallb #25043, @harsimran-pabla)
• Fix bug where Cilium configurations running with tunneling disabled, BPF-masq disabled, but with masquerading enabled, do not clean up ipset configuration when a node IP changes. This can lead to a lack of masquerading on those node IPs. (Backport PR v1.12 Backports 2023-04-20 #25012, Upstream PR node/manager: Remove ipset config from previous node state #24825, @christarazi)
• Fix connectivity issue if nodes share the same name across the clustermesh and wireguard is enabled (Backport PR v1.12 Backports 2023-04-20 #25012, Upstream PR Fix connectivity issue if nodes share the same name across the clustermesh and wireguard is enabled #24785, @giorio94)
• Fix data race affecting the preferred mark in backends, e.g. backends selected by service with affinity set to local. In very rare cases a backend might be missing its preferred status and a non-local backend might be selected. (Backport PR v1.12 Backports 2023-05-10 #25348, Upstream PR k8s: Fix data race between ServiceCache and K8sWatcher #25087, @joamaki)
• Fix incorrect network policy ebpf setup that may lead to incorrect packets denies when CEP is present in multiple CES (Backport PR v1.12 backports 2023-04-28 #25188, Upstream PR agent: Handle correctly state when CEP is present in multiple CESs #24838, @alan-kut)
• Fix spurious errors containing "Failed to map node IP address to allocated ID". (Backport PR v1.12 Backports 2023-05-10 #25348, Upstream PR linux/node_id: do not attempt to map NoID #25222, @bimmlerd)
• ipsec: Fix packet mark for FWD XFRM policy (Backport PR v1.12 Backports 2023-05-10 #25348, Upstream PR ipsec: Fix packet mark for FWD XFRM policy #23254, @pchaigno)
• pkg/kvstore: Fix for deadlock in etcd status checker (Backport PR v1.12 Backports 2023-04-20 #25012, Upstream PR pkg/kvstore: Fix for deadlock in etcd status checker #24786, @hemanthmalla)

CI Changes:

• ci: remove STATUS commands from upstream tests' Jenkinsfile (Backport PR v1.12 backports 2023-04-26 #25138, Upstream PR ci: remove STATUS commands from upstream tests' Jenkinsfile #25046, @nbusseneau)
• ci: remove STATUS commands from upstream tests' Jenkinsfile (Backport PR v1.12 Backports 2023-05-03 #25248, Upstream PR ci: remove STATUS commands from upstream tests' Jenkinsfile #25046, @nbusseneau)
• Delete "Cilium monitor verbose mode" test (Backport PR v1.12 Backports 2023-05-10 #25348, Upstream PR Delete "Cilium monitor verbose mode" test #25212, @michi-covalent)
• inctimer: fix test flake where timer does not fire within time. (Backport PR v1.12 Backports 2023-05-03 #25248, Upstream PR inctimer: fix test flake where timer does not fire within time. #25219, @tommyp1ckles)

Misc Changes:

• chore(deps): update hubble cli to v0.11.5 (v1.12) (patch) (chore(deps): update hubble cli to v0.11.5 (v1.12) (patch) #25126, @renovate[bot])
• daemon: Mark CES feature as beta in agent flag (Backport PR v1.12 Backports 2023-04-20 #25012, Upstream PR daemon: Mark CES feature as beta in agent flag #24850, @pchaigno)
• docs: Add matrix version between envoy and cilium (Backport PR v1.12 Backports 2023-05-03 #25248, Upstream PR docs: Add matrix version between envoy and cilium #25109, @sayboras)
• docs: Add platform support to docs (Backport PR v1.12 Backports 2023-05-03 #25248, Upstream PR docs: Add platform support to docs #25174, @joestringer)
• docs: small fixes for k8s upgrade guide (Backport PR v1.12 Backports 2023-04-20 #25012, Upstream PR docs: small fixes for k8s upgrade guide #24869, @tklauser)
• envoy: Debug log remote IDs for Envoy policies (Backport PR v1.12 Backports 2023-04-20 #25012, Upstream PR envoy: Debug log remote IDs for Envoy policies #24939, @jrajahalme)
• helm: add clustermesh nodeport config warning about known bug Strange behavior when using NodePort with clustermesh #24692 (Backport PR v1.12 Backports 2023-05-03 #25248, Upstream PR helm: add clustermesh nodeport config warning about known bug #24692 #25033, @giorio94)
• ipsec: Install default-drop XFRM policy sooner (Backport PR v1.12 Backports 2023-05-10 #25348, Upstream PR ipsec: Install default-drop XFRM policy sooner #25257, @pchaigno)
• Makefile: use a specific template for mktemp files (Backport PR v1.12 Backports 2023-05-03 #25248, Upstream PR Makefile: use a specific template for mktemp files #25192, @kaworu)
• node/manager: Only remove old IPs if they weren't already added (Backport PR v1.12 Backports 2023-04-20 #25012, Upstream PR node/manager: Only remove old IPs if they weren't already added #25067, @christarazi)
• pkg/service: Backends leak follow ups with revised fixes, debugging improvements and unit tests (Backport PR v1.12 Backports 2023-05-03 #25248, Upstream PR pkg/service: Backends leak follow ups with revised fixes, debugging improvements and unit tests #24770, @aditighag)

Other Changes:

• [v1.12] contrib/backporting: Fix main branch reference ([v1.12] contrib/backporting: Fix main branch reference #25092, @joestringer)
• contrib/backporting: Fix main branch reference (contrib/backporting: Fix main branch reference #25140, @sayboras)
• envoy: Upgrade to v1.23.9 (envoy: Upgrade to v1.23.9 #25209, @sayboras)
• install: Update image digests for v1.12.9 (install: Update image digests for v1.12.9 #24953, @gentoo-root)
• v1.12: docs: Document upgrade impact for IPsec (v1.12: docs: Document upgrade impact for IPsec #24972, @pchaigno)