bump golang.org/x/net to v0.17.0 to address CVE concerns

[RainbowMango]

What type of PR is this?

/kind cleanup

What this PR does / why we need it:

Bumping golang.org/x/net in light of CVE-2023-39325 and CVE-2023-44487.

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

bump golang.org/x/net to v0.17.0 to address CVE(CVE-2023-39325, CVE-2023-44487) concerns.

[RainbowMango]

cc @XiShanYongYe-Chang @zhzhuang-zju

[zhzhuang-zju]

I tried a local trivy scan and from the results, vulnerabilities CVE-2023-39325 and CVE-2023-44487 were resolved by bumping golang.org/x/net to v0.17.0.
The overall process is as follows

1. git pull the latest code of the branch RainbowMango:pr_update_net to local
2. code scanning with trivy

➜  karmada git:(trivyscan) ✗ trivy fs --format table --scanners vuln /home/karmada                             
Total: 1 (UNKNOWN: 0, LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

┌──────────────────────────────────────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│                           Library                            │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                            Title                            │
├──────────────────────────────────────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ go.opentelemetry.io/contrib/instrumentation/net/http/otelht- │ CVE-2023-45142 │ HIGH     │ fixed  │ 0.35.1            │ 0.44.0        │ OpenTelemetry-Go Contrib vulnerable to denial of service in │
│ tp                                                           │                │          │        │                   │               │ otelhttp due to unbound...                                  │
│                                                              │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2023-45142                  │
└──────────────────────────────────────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘

[XiShanYongYe-Chang]

Thanks~
/lgtm

[zhzhuang-zju]

Thanks~
/lgtm

[karmada-bot]

@zhzhuang-zju: changing LGTM is restricted to collaborators

In response to this:

Thanks~
/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[karmada-bot]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment