fix: CVE-2023-39325 & CVE-2023-44487

[svghadi]

What type of PR is this?
/kind bug

What does this PR do / why we need it:
Fixes CVE-2023-39325 & CVE-2023-44487.
Changes:

• Update golang to 1.20
• Update golang.org/x/net to v0.17.0
• Disable HTTP/2 by default on the server

How to test changes / Special notes to the reviewer:
Logs from local test to validate
HTTP/2 enabled

root@test-jxlfz:/# curl --insecure --head --http2 https://server-service:8080
HTTP/2 403 
content-type: text/plain; charset=utf-8
x-content-type-options: nosniff
content-length: 24
date: Fri, 27 Oct 2023 06:39:05 GMT

root@test-jxlfz:/# curl --insecure --head --http1.1 https://server-service:8080
HTTP/1.1 403 Forbidden
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Fri, 27 Oct 2023 06:39:35 GMT
Content-Length: 24

HTTP/2 Disabled

root@test-jxlfz:/# curl --insecure --head --http2 https://server-service:8080
HTTP/1.1 403 Forbidden
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Fri, 27 Oct 2023 07:05:41 GMT
Content-Length: 24

root@test-jxlfz:/# curl --insecure --head --http1.1 https://server-service:8080
HTTP/1.1 403 Forbidden
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff
Date: Fri, 27 Oct 2023 07:05:44 GMT
Content-Length: 24

[openshift-ci]

@svghadi: The label(s) kind/bug cannot be applied, because the repository doesn't have them.

In response to this:

What type of PR is this?
/kind bug

What does this PR do / why we need it:

Have you updated the necessary documentation?

• Documentation update is required by this PR.
• Documentation has been updated.

Which issue(s) this PR fixes:

Fixes #?

How to test changes / Special notes to the reviewer:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[iam-veeramalla]

/lgtm

[iam-veeramalla]

/approve

[chetan-rns]

/lgtm
/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: chetan-rns, iam-veeramalla

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [chetan-rns]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment