dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from v2.7.0 to v2.17.1

[liggitt]

This PR updates the grpc-gateway dependency to pick up grpc-ecosystem/grpc-gateway#3317

This removes the direct dependency on google.golang.org/genproto (which clears the way to clean up that dependency tree once google.golang.org/genproto/googleapis/rpc drops the reference to google.golang.org/genproto, see googleapis/go-genproto#1015 for details)

[serathius]

FAIL: inconsistent versions for depencency: google.golang.org/genproto/googleapis/api
  - google.golang.org/genproto/googleapis/api@v0.0.0-20230525234035-dd9d682886f9 from: go.etcd.io/etcd/api/v3
  - google.golang.org/genproto/googleapis/api@v0.0.0-202307261[55](https://github.com/etcd-io/etcd/actions/runs/5740357922/job/15557997172?pr=16357#step:7:56)614-23370e0ffb3e from: go.etcd.io/etcd/server/v3

[liggitt]

oops, fixed

[ahrtr]

etcd doesn't directly depend on github.com/grpc-ecosystem/grpc-gateway/v2. It's just an indirect dependency, which is introduced by go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc.

Usually we don't bump indirect dependencies directly [unless there is an urgent CVE or critical bug fix], because we don't know what compatibility issue it may cause. Instead, they (the indirect dependencies) will be automatically bumped each time when we bump the related direct dependencies. I believe this is also the reason why you do not bump grpc-gateway/v2 in Kubernetes directly.

Note that the grpc-gateway/v2 is already on the latest version v2.16.2 in otlptracegrpc's main branch.
So I would suggest to wait opentelemetry-go to release 1.16.1 or 1.17.0. Once it's released, then etcd will bump it, and the grpc-gateway will be automatically bumped by then.

References:

• https://github.com/etcd-io/etcd/blob/main/Documentation/contributor-guide/dependency_management.md#indirect-dependencies
• https://go.dev/ref/mod#minimal-version-selection

[ahrtr]

Eventually we will upgrade grpc-gateway to v2 in #16454. But just as I mentioned in #16454 (comment), I'd like to breakdown the big change, so I am happy to get this PR merged firstly. Could you please rebase this PR and bump grpc-gateway to latest version 2.17.1? Please feel free to let me know if you don't bandwidth to do it, than I can take care of it.

[liggitt]

done

[ahrtr]

Could you rebase this PR although github doesn't show conflict? Your dev branch is far lag behind the head of main branch; sometimes github can't detect some conflict.

[liggitt]

actually done this time :)

[ahrtr]

The workflow fails due to inconsistent google.golang.org/genproto/googleapis/api versions.

Please refer to 40c7f72

[liggitt]

finally got it green

[ahrtr]

LGTM

thx @liggitt

cc @fuweid @jmhbnz @serathius

[fuweid]

LGTM