Update Canal to v3.21.2

upup/models/cloudup/resources/addons/networking.projectcalico.org.canal/k8s-1.22.yaml.template

@@ -4136,7 +4136,7 @@ spec:
       securityContext:
         fsGroup: 65534
       containers:
-      - image: calico/typha:v3.21.1
+      - image: calico/typha:v3.21.2
         name: calico-typha
         ports:
         - containerPort: 5473
@@ -4244,7 +4244,7 @@ spec:
         # This container installs the CNI binaries
         # and CNI network config file on each node.
         - name: install-cni
-          image: docker.io/calico/cni:v3.21.1
+          image: docker.io/calico/cni:v3.21.2
           command: ["/opt/cni/bin/install"]
           envFrom:
           - configMapRef:
@@ -4285,7 +4285,7 @@ spec:
         # Adds a Flex Volume Driver that creates a per-pod Unix Domain Socket to allow Dikastes
         # to communicate with Felix over the Policy Sync API.
         - name: flexvol-driver
-          image: docker.io/calico/pod2daemon-flexvol:v3.21.1
+          image: docker.io/calico/pod2daemon-flexvol:v3.21.2
           volumeMounts:
           - name: flexvol-driver-host
             mountPath: /host/driver
@@ -4296,7 +4296,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: docker.io/calico/node:v3.21.1
+          image: docker.io/calico/node:v3.21.2
           envFrom:
           - configMapRef:
               # Allow KUBERNETES_SERVICE_HOST and KUBERNETES_SERVICE_PORT to be overridden for eBPF mode.
@@ -4563,7 +4563,7 @@ spec:
       priorityClassName: system-cluster-critical
       containers:
         - name: calico-kube-controllers
-          image: docker.io/calico/kube-controllers:v3.21.1
+          image: docker.io/calico/kube-controllers:v3.21.2
           env:
             # Choose which controllers to run.
             - name: ENABLED_CONTROLLERS