sync with upstream & fix conflict

Signed-off-by: gang.liu <gang.liu@daocloud.io>

Merge branch 'feat/pod-labels' into mydev

Merge remote-tracking branch 'upstream/main' into feat/pod-labels

gen crd

Signed-off-by: gang.liu <gang.liu@daocloud.io>

gen crd

Signed-off-by: gang.liu <gang.liu@daocloud.io>

set pod annotations for contour

Signed-off-by: Gang Liu <gang.liu@daocloud.io>

fix conflict

Signed-off-by: Gang Liu <gang.liu@daocloud.io>

cherry pick & merge conflict

Signed-off-by: Gang Liu <gang.liu@daocloud.io>

httpproxy: Add support for ip-based filtering

Configures Envoy's envoy.filters.http.rbac per
route via HTTPProxy.

See API docs in this commit for details.

Fixes projectcontour#3693

Signed-off-by: Evan Cordell <cordell.evan@gmail.com>

add service type:nodePort support

Signed-off-by: Gang Liu <gang.liu@daocloud.io>