Fix dag rebuild trigger when Secret object changes (projectcontour#5463)

* Fix CRL rotation.

Update of CRL Secret did not trigger DAG rebuild when it was not co-located
in the same Secret with CA certificate.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* refactor secret dag rebuild comparisons, allow cross-namespace crl refs

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* Fixed review comments

- remove delegation checks to simplify DAG rebuild trigger check
- Use ingress annotation: projectcontour.io/tls-cert-namespace

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* Updated changelog to address also the ingress case

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

* Update internal/dag/cache.go

Co-authored-by: Steve Kriss <stephen.kriss@gmail.com>

* added ingress namespace defaulting, fixed typo in annotation name in tests

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

---------

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
Co-authored-by: Steve Kriss <stephen.kriss@gmail.com>

remove informer for ContourConfiguration (projectcontour#5133)

ContourConfiguration is not being cached
in the DAG cache so the informer is not
needed.

Also adds ContourConfiguration and
ContourDeployment to the KindOf function
since they are known types.

Signed-off-by: Steve Kriss <krisss@vmware.com>

test: use helper to generate ObjectMeta (projectcontour#5094)

Test objects were created with uninitialized ResourceVersion and Generation
since the values did not matter when complete object content was compared to
detect updates.

This change is preparation for projectcontour#5064 and introduces a helper function to
generate unique ObjectMeta. Tests cases that depend on object update are
changed to use the helper instead of hardcoded initialization.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

Avoid cmp.Equal for during update when possible

Comparing the full objects with cmp.Equal() during EventHandler.onUpdate()
was very costly.  Especially in big clusters with lot of objects the load
caused by cmp.Equal() alone was overwhelming compared to the load that
Contour otherwise generates.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

Avoid cmp.Equal for during update when possible

Comparing the full objects with cmp.Equal() during EventHandler.onUpdate()
was very costly.  Especially in big clusters with lot of objects the load
caused by cmp.Equal() alone was overwhelming compared to the load that
Contour otherwise generates.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

Tag v1.24.1 release.

Steve Kriss (1):
      update Envoy to 1.25.1 (projectcontour#5066)

Sunjay Bhatia (1):
      Update Contour Docker image to v1.24.1.

Tag v1.23.3 release.

Steve Kriss (1):
      [release-1.23] v1.23.3 patches (projectcontour#5057)

Sunjay Bhatia (1):
      Update Contour Docker image to v1.23.3.

Tag v1.22.4 release.

Steve Kriss (1):
      [release-1.22] v1.22.4 patches (projectcontour#5056)

Sunjay Bhatia (1):
      Update Contour Docker image to v1.22.4.

Tag v1.24.0 release.

Sunjay Bhatia (1):
      Update Contour Docker image to v1.24.0.

httpproxy: Add support for ip-based filtering

Configures Envoy's envoy.filters.http.rbac per
route via HTTPProxy.

See API docs in this commit for details.

Fixes projectcontour#3693

Signed-off-by: Evan Cordell <cordell.evan@gmail.com>