chore: upgrade ip-masq-agent addon to v2.8.0

[jadarsie]

Reason for Change:

The base image of the current ip-masq-agent addon uses an iptables version (v1.6) that does not support --random-fully rules. These rules prevent a known kernel race condition that drops packages when doing SNAT (details).

It was recently determined that an on-prem workload was impacted by this race condition.

Upgrading to the latest release of the addon also upgrades the base image to the same base image used to build kube-proxy (iptables v1.8) which includes support for random-fully.

Issue Fixed:

Credit Where Due:

Does this change contain code from or inspired by another project?

• No
• Yes

If "Yes," did you notify that project's maintainers and provide attribution?

• No
• Yes

Requirements:

• uses conventional commit messages
• includes documentation
• adds unit tests
• tested upgrade from previous version

Notes:

[Michael-Sinz]

Thank you for catching this. Definitely a good fix.

[jackfrancis]

/lgtm