Upgrade calico to 3.21.2

[EugenMayer]

Calico fixed some ingress issues with 3.21.x (so traffic coming into the calico network) when running eBPF.

We face a huge (80x) performance regression when eBPF is active when the traffic is "external to pod" - in the calico support we got suggested that 3.21.1 can fix this.

For this path to work we would need to build

• image: rancher/mirrored-calico-operator:v1.23.3
• image: rancher/mirrored-calico-ctl:v3.21.2

Any reasons to not upgrade calico right now?

[manuelbuil]

I guess we will need new versions for the other components (e.g. mirrored-calico-typha, mirrored-calico-cni, etc. Right?

[EugenMayer]

for me it seems those are not mirrored, are they?

 tigeraOperator:
-  image: tigera/operator
+  image: rancher/mirrored-calico-operator
   version: v1.21.2
-  registry: quay.io
+  registry: docker.io
 calicoctl:
-  image: quay.io/docker.io/calico/ctl
+  image: rancher/mirrored-calico-ctl
   tag: v3.21.2

Seem like we only mirror ctl and the operator - or did I miss it? considering the last upgrade beaf531 there was no patching of those images either

[manuelbuil]

Already covered by #204