[release-1.31] Update Kubernetes to v1.31.2

[brooksn]

Proposed Changes

Types of Changes

Verification

Testing

Linked Issues

User-Facing Change

Further Comments

[cwayne18]

/trivy

[github-actions]

❌ Trivy scan action failed, check logs ❌

[cwayne18]

/trivy

[github-actions]

For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://aquasecurity.github.io/trivy/v0.56/docs/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


bin/k3s (gobinary)
==================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                            │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ go.opentelemetry.io/contrib/instrumentation/google.golang.o- │ CVE-2023-47108 │ HIGH     │ fixed  │ v0.45.0           │ 0.46.0        │ opentelemetry-go-contrib: DoS vulnerability in otelgrpc due │
│ rg/grpc/otelgrpc                                             │                │          │        │                   │               │ to unbound cardinality metrics                              │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2023-47108                  │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 42.19%. Comparing base (221ab22) to head (50d0828).
Report is 1 commits behind head on release-1.31.

Additional details and impacted files

@@               Coverage Diff                @@
##           release-1.31   #11155      +/-   ##
================================================
- Coverage         46.59%   42.19%   -4.41%     
================================================
  Files               178      178              
  Lines             18474    18474              
================================================
- Hits               8608     7795     -813     
- Misses             8517     9477     +960     
+ Partials           1349     1202     -147     

Flag	Coverage Δ
e2etests	34.35% <ø> (-7.45%)	⬇️
inttests	34.61% <ø> (+0.01%)	⬆️
unittests	13.15% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[dereknola]

@brooksn if you want to get rid of the single CVE, you could bump otelgrpc version to v0.46.0. The etcd version we use also links to v0.46.0, and upstream k8s is already on v0.53.0

Otherwise we will pick it up next month.

[brooksn]

/trivy

[github-actions]

❌ Trivy scan action failed, check logs ❌

[nicholasSUSE]

Approved