To keep etcd projects up to date with the latest patch releases &
incorporate the latest security updates.

Signed-off-by: arjunmalhotra1 <am2cj@virginia.edu>

[3.5] etcd: upgrade go version from 1.20.10 to 1.20.11

Use a template to consolidate arm64 and amd64 test workflows. Enable
running armd64 tests on every push and pull request.

Signed-off-by: Ivan Valdes <ivan@vald.es>

…telemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0

Signed-off-by: sharath sivakumar <sharath.sivakumar@mollie.com>

…apis/api,google.golang.org/grpc to make it consistent

Signed-off-by: sharath sivakumar <sharath.sivakumar@mollie.com>

[3.5] CVE-2023-47108: Backport go.opentelemetry.io/otel@v1.20.0 and go.open…

…every-push-and-pr-in-release-3.5

github workflow: run arm64 tests on every push

ExperimentalDistributedTracingSamplingRatePerMillion is the
number of samples to collect per million spans.
Defaults to 0.

Signed-off-by: James Blair <mail@jamesblair.net>

Signed-off-by: James Blair <mail@jamesblair.net>

Signed-off-by: James Blair <mail@jamesblair.net>

[3.5] Backport add sampling rate to fix distributed tracing

It's possible that etcd server may run into SSRF situation when adding a new member. If users provide a malicious peer URL, the existing etcd members may be redirected to other unexpected internal URL when getting the new member's version.

Signed-off-by: James Blair <mail@jamesblair.net>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

…tep1

[3.5] Backport healthcheck code cleanup

Signed-off-by: Chao Chen <chaochn@amazon.com>

Add two separate probes, one for liveness and one for readiness. The liveness probe would check that the local individual node is up and running, or else restart the node, while the readiness probe would check that the cluster is ready to serve traffic. This would make etcd health-check fully Kubernetes API complient.

Signed-off-by: Siyuan Zhang <sizhang@google.com>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

[3.5] Backport disable following redirects when checking peer urls

Disable following redirects from peer HTTP communication on the client's side.
Etcd server may run into SSRF (Server-side request forgery) when adding a new
member. If users provide a malicious peer URL, the existing etcd members may be
redirected to another unexpected internal URL when getting the new member's
version.

Signed-off-by: Ivan Valdes <ivan@vald.es>

Backport disable redirects in peer communication to release-3.5

Signed-off-by: Jonas Riedel <jonasriedel@pm.me>

Signed-off-by: Siyuan Zhang <sizhang@google.com>

…go-1.20.12

[3.5] Update go version to 1.20.12

[3.5] Backport livez/readyz

…penshift-4.15-ose-etcd

OCPBUGS-19279: Updating ose-etcd images to be consistent with ART