Remove otelgrpc pinned dependency

[dereknola]

Proposed Changes

• Unpin otelgrpc dependency, added with the v1.26.0 release, to allow it to match upstreams version automatically.
• Bump grpc to match upstream version

Types of Changes

Dependency bumps

Verification

make passes

Testing

N/A

Linked Issues

N/A

User-Facing Change

Further Comments

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 44.14%. Comparing base (270f85e) to head (e33b4c7).
Report is 1 commits behind head on master.

❗ There is a different number of reports uploaded between BASE (270f85e) and HEAD (e33b4c7). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (270f85e)	HEAD (e33b4c7)
e2etests	7	6

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #10799      +/-   ##
==========================================
- Coverage   49.92%   44.14%   -5.78%     
==========================================
  Files         178      178              
  Lines       14777    14777              
==========================================
- Hits         7377     6523     -854     
- Misses       6063     7059     +996     
+ Partials     1337     1195     -142     

Flag	Coverage Δ
e2etests	36.46% <ø> (-9.82%)	⬇️
inttests	36.79% <ø> (+17.08%)	⬆️
unittests	13.57% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[brandond]

if it works great, the otel stuff has been a pain in the but to keep in sync across the different projects that we embed.

[cwayne18]

/trivy

[github-actions]

bin/k3s (gobinary)
==================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                            │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ go.opentelemetry.io/contrib/instrumentation/google.golang.o- │ CVE-2023-47108 │ HIGH     │ fixed  │ v0.45.0           │ 0.46.0        │ opentelemetry-go-contrib: DoS vulnerability in otelgrpc due │
│ rg/grpc/otelgrpc                                             │                │          │        │                   │               │ to unbound cardinality metrics                              │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2023-47108                  │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘

bin/runc (gobinary)
===================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌──────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│     Library      │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                             │
├──────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ golang.org/x/net │ CVE-2023-39325 │ HIGH     │ fixed  │ v0.8.0            │ 0.17.0        │ golang: net/http, x/net/http2: rapid stream resets can cause │
│                  │                │          │        │                   │               │ excessive work (CVE-2023-44487)                              │
│                  │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2023-39325                   │
└──────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

[cwayne18]

/trivy

[cwayne18]

/trivy

[github-actions]

❌ Trivy scan action failed, check logs ❌

[github-actions]

[dereknola]

hmmm... rerunning a failed trivy scan does not seem to work out