Bump dependencies to address CVE-2023-44487

[ingvagabund]

There's no 1.27.7 release yet. So pinning the k8s deps to the latest release-1.27 head

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[knelasevero]

/lgtm

[ingvagabund]

/retest-required

[ingvagabund]

/retest-required

[knelasevero]

Hey @ingvagabund , change all occurrences of kubernetes/pause to registry.k8s.io/pause and e2e in CI should be good. kubernetes/pause is not pullable anymore.

test/e2e/e2e_duplicatepods_test.go
89:                                             Image:           "registry.k8s.io/pause",

test/e2e/e2e_leaderelection_test.go
179:                                            Image:           "registry.k8s.io/pause",

test/e2e/e2e_toomanyrestarts_test.go
90:                                             Image:           "registry.k8s.io/pause",

test/e2e/e2e_test.go
73:                     Image:           "registry.k8s.io/pause",
334:                                    Image:           "registry.k8s.io/pause",
1339:                                           Image: "registry.k8s.io/pause",

test/run-e2e-tests.sh
36:    ${CONTAINER_ENGINE:-docker} pull registry.k8s.io/pause
37:    kind load docker-image registry.k8s.io/pause

Locally I was getting same errors, and with this change:

...
tead
    e2e_topologyspreadconstraint_test.go:153: Pods for test-rc-topology-spread-soft-constraint were distributed in line with max skew of 1
    e2e_test.go:1185: Waiting for test-rc-topology-spread-soft-constraint-violator RC pods to disappear, still 2 remaining
    e2e_test.go:1185: Waiting for test-rc-topology-spread-soft-constraint-violator RC pods to disappear, still 0 remaining
    e2e_test.go:1185: Waiting for test-rc-topology-spread-soft-constraint RC pods to disappear, still 4 remaining
    e2e_test.go:1185: Waiting for test-rc-topology-spread-soft-constraint RC pods to disappear, still 0 remaining
--- PASS: TestTopologySpreadConstraint (54.42s)
    --- PASS: TestTopologySpreadConstraint/test-rc-topology-spread-hard-constraint (27.16s)
    --- PASS: TestTopologySpreadConstraint/test-rc-topology-spread-soft-constraint (27.14s)
=== RUN   TestClientConnectionConfiguration
--- PASS: TestClientConnectionConfiguration (0.11s)
PASS
ok      sigs.k8s.io/descheduler/test/e2e        461.730s

[ingvagabund]

/retest-required

[knelasevero]

/lgtm

[a7i]

Does this need to be cherry-picked to 0.26/release-1.26?

[a7i]

/easycla

[ingvagabund]

Does this need to be cherry-picked to 0.26/release-1.26?

Eventually. We are still evaluating. This might be only a partial fix.

[ingvagabund]

Does this need to be cherry-picked to 0.26/release-1.26?

@a7i we should. However, we can fix this only partially. There's no golang 1.19 backport yet: golang/go#63417 (comment)

[ingvagabund]

@a7i the least we can do: #1273