cilium: performance fixes and reproducible images (#2855)

* helm: bump cilium version

* helm: patch Cilium chart version

internal/constellation/helm/charts/cilium/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: cilium
 displayName: Cilium
 home: https://cilium.io/
-version: 1.15.0-pre.3
-appVersion: 1.15.0-pre.3
+version: 1.15.0-pre.3-edg.2
+appVersion: 1.15.0-pre.3-edg.2
 kubeVersion: ">= 1.16.0-0"
 icon: https://cdn.jsdelivr.net/gh/cilium/cilium@main/Documentation/images/logo-solo.svg
 description: eBPF-based Networking, Security, and Observability

internal/constellation/helm/cilium.patch

@@ -44,3 +44,18 @@ index c00e9af831..4661c16f56 100644
  
    ipsec:
      # -- Name of the key file inside the Kubernetes secret configured via secretName.
+diff --git a/install/kubernetes/cilium/Chart.yaml b/install/kubernetes/cilium/Chart.yaml
+index 256a79542..3f3fc714b 100644
+--- a/install/kubernetes/cilium/Chart.yaml
++++ b/install/kubernetes/cilium/Chart.yaml
+@@ -2,8 +2,8 @@ apiVersion: v2
+ name: cilium
+ displayName: Cilium
+ home: https://cilium.io/
+-version: 1.15.0-pre.3
+-appVersion: 1.15.0-pre.3
++version: 1.15.0-pre.3-edg.2
++appVersion: 1.15.0-pre.3-edg.2
+ kubeVersion: ">= 1.16.0-0"
+ icon: https://cdn.jsdelivr.net/gh/cilium/cilium@main/Documentation/images/logo-solo.svg
+ description: eBPF-based Networking, Security, and Observability

internal/constellation/helm/helm_test.go

@@ -198,7 +198,7 @@ func TestHelmApply(t *testing.T) {
 			if tc.clusterCertManagerVersion != nil {
 				certManagerVersion = *tc.clusterCertManagerVersion
 			}
-			helmListVersion(lister, "cilium", "v1.15.0-pre.3")
+			helmListVersion(lister, "cilium", "v1.15.0-pre.3-edg.2")
 			helmListVersion(lister, "cert-manager", certManagerVersion)
 			helmListVersion(lister, "constellation-services", tc.clusterMicroServiceVersion)
 			helmListVersion(lister, "constellation-operators", tc.clusterMicroServiceVersion)

internal/constellation/helm/loader.go

@@ -342,16 +342,16 @@ func (i *chartLoader) loadCiliumValues(cloudprovider.Provider) (map[string]any,
 		"image": map[string]any{
 			"repository": "ghcr.io/edgelesssys/cilium/cilium",
 			"suffix":     "",
-			"tag":        "v1.15.0-pre.3-edg.1",
-			"digest":     "sha256:008b848a1faf0db3293e014a967003638e27324dabaa2355f7ca4071581b34ec",
+			"tag":        "v1.15.0-pre.3-edg.2",
+			"digest":     "sha256:c21b7fbbb084a128a479d6170e5f89ad2768dfecb4af10ee6a99ffe5d1a11749",
 			"useDigest":  true,
 		},
 		"operator": map[string]any{
 			"image": map[string]any{
 				"repository":    "ghcr.io/edgelesssys/cilium/operator",
 				"suffix":        "",
-				"tag":           "v1.15.0-pre.3-edg.1",
-				"genericDigest": "sha256:340829ed0ec3d2777df9d724e0fb33a348e2292292dc2654121363bbe91019ee",
+				"tag":           "v1.15.0-pre.3-edg.2",
+				"genericDigest": "sha256:4ea9de5cfeb4554b82b509f0de41120a90e35a15e81a04f76c4cb405ddea3e7c",
 				"useDigest":     true,
 			},
 			"podDisruptionBudget": map[string]any{