ci: bump cilium to v1.17.0 (#4982)

Signed-off-by: zhangzujian <[email protected]>

.github/workflows/build-windows.yaml

@@ -23,7 +23,7 @@ concurrency:
 
 env:
   GO_VERSION: ''
-  GOSEC_VERSION: '2.20.0'
+  GOSEC_VERSION: '2.22.0'
 
 jobs:
   filter:

Makefile

@@ -30,7 +30,7 @@ CONTROL_PLANE_TAINTS = node-role.kubernetes.io/master node-role.kubernetes.io/co
 FRR_VERSION = 9.1.3
 FRR_IMAGE = quay.io/frrouting/frr:$(FRR_VERSION)
 
-CLAB_IMAGE = ghcr.io/srl-labs/clab:0.61.0
+CLAB_IMAGE = ghcr.io/srl-labs/clab:0.64.0
 
 MULTUS_VERSION = v4.1.4
 MULTUS_IMAGE = ghcr.io/k8snetworkplumbingwg/multus-cni:$(MULTUS_VERSION)-thick
@@ -50,10 +50,10 @@ KUBEVIRT_LAUNCHER_IMAGE = quay.io/kubevirt/virt-launcher:$(KUBEVIRT_VERSION)
 KUBEVIRT_OPERATOR_YAML = https://github.com/kubevirt/kubevirt/releases/download/$(KUBEVIRT_VERSION)/kubevirt-operator.yaml
 KUBEVIRT_CR_YAML = https://github.com/kubevirt/kubevirt/releases/download/$(KUBEVIRT_VERSION)/kubevirt-cr.yaml
 
-CILIUM_VERSION = 1.16.5
+CILIUM_VERSION = 1.17.0
 CILIUM_IMAGE_REPO = quay.io/cilium
 
-CERT_MANAGER_VERSION = v1.16.3
+CERT_MANAGER_VERSION = v1.17.0
 CERT_MANAGER_CONTROLLER = quay.io/jetstack/cert-manager-controller:$(CERT_MANAGER_VERSION)
 CERT_MANAGER_CAINJECTOR = quay.io/jetstack/cert-manager-cainjector:$(CERT_MANAGER_VERSION)
 CERT_MANAGER_WEBHOOK = quay.io/jetstack/cert-manager-webhook:$(CERT_MANAGER_VERSION)

e2e.mk

@@ -46,8 +46,6 @@ ifeq ($(E2E_CILIUM_CHAINING),true)
 # This means that when defining services, the targetPort MUST equal the port,
 # otherwise the packet will be dropped.
 K8S_CONFORMANCE_E2E_SKIP += "sig-network.*Networking.*Feature:SCTPConnectivity"
-# https://github.com/cilium/cilium/issues/9207
-K8S_CONFORMANCE_E2E_SKIP += "sig-network.*Services.*should serve endpoints on same port and different protocols"
 endif
 
 GINKGO_OUTPUT_OPT =