[RELEASE-1.9] Sync upstream release (#56)

* upgrade to latest dependencies (knative-extensions#1066)

bumping knative.dev/hack c7cfcb0...199139d:
  > 199139d Find checksums file works with ARTIFACTS_TO_PUBLISH variable (# 276)
  > 1384ebd [release-1.9] 🐛 Location-agnostic sign release (# 271)
bumping golang.org/x/net 1e63c2f...8e2b117:
  > 8e2b117 http2/hpack: avoid quadratic complexity in hpack decoding
  > 547e7ed http2: avoid referencing ResponseWrite.Write parameter after returning
  > 39940ad html: parse comments per HTML spec
  > 87ce33e go.mod: update golang.org/x dependencies
  > 415cb6d all: fix some comments
  > 7e3c19c all: correct typos in comments
  > 296f09a http2: case insensitive handling for 100-continue
  > f8411da nettest: fix tests on dragonfly and js/wasm
  > 8e0e7d8 go.mod: update golang.org/x dependencies
  > 7805fdc http2: rewrite inbound flow control tracking
  > 2aa8215 nettest: use RoutedInterface for probing network stack capability
  > ad92d3d websocket: don't recommend Gorilla
  > e1ec361 http2: fix race in TestCanonicalHeaderCacheGrowth
bumping golang.org/x/sys 3ca3b18...90c8f94:
  > 90c8f94 unix: avoid converting non-pointers to unsafe.Pointer in PtraceIO
  > 4e121b1 unix: add missing address operator in initxattrdest
  > 68f9dcb windows/debug/svc: buffer channel passed to signal.Notify
  > 0e1262c unix: add ptrace(PT_DENY_ATTACH) wrapper for darwin
  > 6938dae unix: add missing constants used with struct Timex on Linux
  > 01b330b unix: improve flaky solaris test logging
  > e7d7f63 all: fix some comments
  > 7a75290 unix/linux: update to glibc 2.36
  > 4112509 windows/mkwinsyscall: write source to temp file if formatting fails
  > 71da690 windows/mkwinsyscall: support "." and "-" in DLL name
  > b829a39 unix/linux: update to gcc 13.0.0, qemu 7.1.0 for loong64
  > c3037ed unix: add support for clock_adjtime on Linux
  > 13fe000 cpu: add IsBigEndian
  > 17fce3a unix: avoid false positive in vet shift check
  > a6f4650 windows: use UTF16FromString and UTF16ToString from syscall
  > 6e4d1c5 unix/linux: update to Linux kernel 6.1 and Go 1.20-rc2
  > b8be2fd cpu: add //go:build line to cpu_gccgo_x86.c
  > 1e9f341 unix: add //go:build line to gccgo_c.c
  > b60007c unix: add Uvmexp and SysctlUvmexp for NetBSD
  > b751db5 unix: gofmt hurd files after CL 459895
  > b360406 unix: support TIOCGETA on GNU/Hurd
  > 3086868 unix: regen on OpenBSD 7.2
  > 2b11e6b unix: remove Mclpool from openbsd types
  > 7c6badc unix: convert openbsd/mips64 to direct libc calls
  > 3b1fc93 unix: avoid allocations for common uses of Readv, Writev, etc.
  > 2204b66 cpu: parse /proc/cpuinfo on linux/arm64 on old kernels when needed
  > 72f772c unix: offs2lohi should shift by bits, not bytes
  > cffae8e unix: add ClockGettime on *bsd and solaris
  > 96e75de unix: improve Sendmsg and Recvmsg documentation
  > 127c0dd unix/linux: use Go 1.20rc1 to generate files
bumping knative.dev/networking db2bcbe...5e096d6:
  > 5e096d6 upgrade to latest dependencies (# 774)
  > 6689f05 upgrade to latest dependencies (# 769)
bumping knative.dev/pkg 247510c...75da922:
  > 75da922 upgrade to latest dependencies (# 2696)
  > cea413f [release-1.9] bump net and text packages (# 2694)
  > 8efb348 fix: `reconcilerImpl.updateStatus` calculates state difference in debug mode only (# 2686)
bumping golang.org/x/term 97ca0e3...d974fe8:
  > d974fe8 go.mod: update golang.org/x dependencies
  > 1efcd90 go.mod: update golang.org/x dependencies
bumping golang.org/x/text c8236a6...71a9c9a:
  > 71a9c9a all: fix some comments
  > ec5565b README.md: update documentation of module versioning

Signed-off-by: Knative Automation <[email protected]>

* bump go.mod (knative-extensions#1072)

* bump istio to v1.16.3 (knative-extensions#1074)

* Disable update test (knative-extensions#1122)

See: knative-extensions#938

Co-authored-by: dprotaso <[email protected]>

* drop safe-to-evict annotations (knative-extensions#1120)

Co-authored-by: dprotaso <[email protected]>

* Sync upstream release

---------

Signed-off-by: Knative Automation <[email protected]>
Co-authored-by: knative-automation <[email protected]>
Co-authored-by: Dave Protasowski <[email protected]>
Co-authored-by: Knative Prow Robot <[email protected]>

config/500-controller.yaml

@@ -29,7 +29,6 @@ spec:
   template:
     metadata:
       annotations:
-        cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
         # This must be outside of the mesh to probe the gateways.
         # NOTE: this is allowed here and not elsewhere because
         # this is the Istio controller, and so it may be Istio-aware.

config/500-webhook-deployment.yaml

@@ -29,8 +29,6 @@ spec:
       role: net-istio-webhook
   template:
     metadata:
-      annotations:
-        cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
       labels:
         app: net-istio-webhook
         role: net-istio-webhook

openshift/release/artifacts/net-istio-core.yaml

@@ -131,7 +131,6 @@ spec:
   template:
     metadata:
       annotations:
-        cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
         # This must be outside of the mesh to probe the gateways.
         # NOTE: this is allowed here and not elsewhere because
         # this is the Istio controller, and so it may be Istio-aware.
@@ -238,8 +237,6 @@ spec:
       role: net-istio-webhook
   template:
     metadata:
-      annotations:
-        cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
       labels:
         app: net-istio-webhook
         role: net-istio-webhook

test/e2e-tests.sh

@@ -22,9 +22,19 @@ initialize $@  --skip-istio-addon
 
 # TODO Re-enable conformance tests for mesh when everything's been fixed
 # https://github.com/knative-sandbox/net-istio/issues/584
+#
+# Also update tests are super flakey and need to be fixed
+# https://github.com/knative-sandbox/net-istio/issues/938
+#
 if [[ $MESH -eq 0 ]]; then
-  go_test_e2e -timeout=60m ./test/conformance --parallel 12 \
-    --enable-beta --enable-alpha || fail_test
+  go_test_e2e \
+    -timeout 60m \
+    -parallel 12 \
+    ./test/conformance \
+    -args \
+    -enable-alpha \
+    -enable-beta \
+    -skip-tests update || fail_test
 fi
 
 go_test_e2e -timeout=10m \