Update net-istio nightly (knative#16079)

bumping knative.dev/net-istio de43ea5...89f70a4:
  > 89f70a4 Fix Server TLS settings so it works with Istio 1.27 (# 1459)

Signed-off-by: Knative Automation <[email protected]>

Author: knative-automation

third_party/istio-latest/net-istio.yaml

@@ -1,4 +1,4 @@
-# Generated when HEAD was de43ea56f85f4c4d34db9a796b623b552fed4f4f
+# Generated when HEAD was 89f70a4bfd080058edf6049c96261e577948463b
 #
 # Copyright 2019 The Knative Authors
 #
@@ -22,7 +22,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     serving.knative.dev/controller: "true"
     networking.knative.dev/ingress-provider: istio
 rules:
@@ -54,7 +54,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -93,7 +93,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -114,7 +114,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
     experimental.istio.io/disable-gateway-port-translation: "true"
 spec:
@@ -152,7 +152,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 data:
   # TODO(nghia): Extract the .svc.cluster.local suffix into its own config.
@@ -262,7 +262,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -280,7 +280,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -313,7 +313,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -329,14 +329,14 @@ spec:
         app: net-istio-controller
         app.kubernetes.io/component: net-istio
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "20250909-de43ea56"
+        app.kubernetes.io/version: "20250912-89f70a4b"
     spec:
       serviceAccountName: controller
       containers:
         - name: controller
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/controller@sha256:71a7b44064369b8eb302d1d2689787b610303d4dcf84ab98806e8fcc544517c2
+          image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/controller@sha256:9247d0e915fb0cd3cabc2a258eda45db2852eba7ab1abb75474bc5c0d670f3b9
           resources:
             requests:
               cpu: 30m
@@ -415,7 +415,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -429,14 +429,14 @@ spec:
         role: net-istio-webhook
         app.kubernetes.io/component: net-istio
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "20250909-de43ea56"
+        app.kubernetes.io/version: "20250912-89f70a4b"
     spec:
       serviceAccountName: controller
       containers:
         - name: webhook
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/webhook@sha256:e6147ec92cbf6dd8617f9b1d4591ac3ddb199b2392f2253a42a220c257a9515f
+          image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/webhook@sha256:210f8acd9a8e3a66d993de2730501707e93d41392108b87f1b5133f60323c69d
           resources:
             requests:
               cpu: 20m
@@ -514,7 +514,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 
 ---
@@ -541,7 +541,7 @@ metadata:
     role: net-istio-webhook
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 spec:
   ports:
@@ -580,7 +580,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 webhooks:
   - admissionReviewVersions:
@@ -619,7 +619,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250909-de43ea56"
+    app.kubernetes.io/version: "20250912-89f70a4b"
     networking.knative.dev/ingress-provider: istio
 webhooks:
   - admissionReviewVersions: