…#3905) (#3932)

Problem: During ServiceAccountToken rotation, nginx-gateway-fabric was sometimes experiencing deadlocks due to the Subscribe method incorrectly intercepting initial configuration operations after a ServiceAccountToken rotation and incorrect signaling broadcast completion

Solution: Implemented a pendingRequest tracking mechanism to distinguish between initial setup operations and broadcast operations.

* Update dependency nginx/agent to v3.3.1

| datasource  | package     | from   | to     |
| ----------- | ----------- | ------ | ------ |
| github-tags | nginx/agent | v3.3.0 | v3.3.1 |



* Update all agent version refs

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

…3938)

Problem: When nginx reload fails, all routes are marked invalid

Solution: Remove adding GatewayNotProgrammed condition to routes since the error should only be reflected on Gateway Listener conditions

Revert changes to agent reload backoff settings due to a fix added in Agent v3.3.1.

Tested SnippetsFilter Functional on NGINX Plus test to ensure changes work.

Problem: For security reasons, it's best practice to not have automountServiceToken on the ServiceAccount, and instead set in directly on the workloads that need the token.

Solution: Set this field on the Pods instead of the ServiceAccounts.

This was missed as part of the original PR.

…3953)

Problem: During an NGF upgrade, the new version of the control plane will send a configuration to the old version of the nginx data plane, before the nginx data plane is updated to the new version. This can cause incompatibility issues for a brief amount of time, which could cause disruptions.

Solution: Implement version validation by ensuring the pod image matches the image in the current deployment/ daemonset spec to prevent configuration from being sent to nginx data plane pods still running the previous image version during upgrades.

Co-authored-by: Ciara Stacke <[email protected]>

Release 2.1.2