Merge pull request cockroachdb#32318 from bdarnell/backport-disable-t…

…imebound

backport-2.1: batcheval: Disable time-bound iterators in KV commands

Merge cockroachdb#32211

32211: batcheval: Work around time-bound iterator bug in RefreshRange r=benesch a=bdarnell

Updates cockroachdb#28358
Fixes cockroachdb#31823

Release note (bug fix): Fix long stalls that can occur in contended
transactions.

Co-authored-by: Ben Darnell <ben@bendarnell.com>

Merge pull request cockroachdb#31841 from nvanbenschoten/backport2.1-…

…31837

release-2.1: closedts: bump kv.closed_timestamp.target_duration default

Merge pull request cockroachdb#31841 from nvanbenschoten/backport2.1-…

…31837

release-2.1: closedts: bump kv.closed_timestamp.target_duration default

Merge pull request cockroachdb#31520 from benesch/backport2.1-31516

release-2.1: c-deps: bump CryptoPP to avoid SIGTRAP on macOS

Merge pull request cockroachdb#31091 from solongordon/backport2.1-30216

release-2.1: distsql: eagerly evaluate constant expressions

Merge pull request cockroachdb#30808 from a-robinson/backport2.1-30747

release-2.1: cli: Mark zone command deprecated so it doesn't show up in help text

rpc,server: authenticate all gRPC methods

Previously only the roachpb.Batch RPC was correctly checking for an
authenticated user. All other RPCs were open to the public, even when
the server was running in secure mode.

To prevent future accidents of this kind, hoist the authentication check
to a gRPC interceptor that is guaranteed to run before all RPCs.

Release note (bug fix): A security vulnerability in which data could be
leaked from or tampered with in a cluster in secure mode has been fixed.

Release note: None

rpc,server: authenticate all gRPC methods

Previously only the roachpb.Batch RPC was correctly checking for an
authenticated user. All other RPCs were open to the public, even when
the server was running in secure mode.

To prevent future accidents of this kind, hoist the authentication check
to a gRPC interceptor that is guaranteed to run before all RPCs.

Release note (bug fix): A security vulnerability in which data could be
leaked from or tampered with in a cluster in secure mode has been fixed.

Release note: None

teamcity-publish-artifacts: push to unstable docker image