Merge pull request cockroachdb#99403 from xinhaoz/backport22.2-98815

Merge pull request cockroachdb#100244 from cockroachdb/blathers/backp…

…ort-release-23.1-100017

release-23.1: upgrades: update system.web_sessions migration to handle orphaned rows

Merge pull request cockroachdb#99673 from cockroachdb/blathers/backpo…

…rt-release-22.2-99643

release-22.2: kvserver: revert cockroachdb#98150

release-22.1: Revert cockroachdb#98150

This reverts cockroachdb#98150 because we think it introduced a problem that was detected
via the `replicate/wide` roachtest[^1]. It seems that for reasons still unknown
we do rely on the periodic gossip trigger on liveness lease extensions.

[^1]: cockroachdb#99268 (comment)

Touches cockroachdb#99268.
Touches cockroachdb#97966.
Closes cockroachdb#99268.
Touches cockroachdb#98945.

Epic: none
Release note: None

build: tweak openssl config for FIPS buils

Previously, for FIPS-enabled builds, the OpenSSL configs were untouched,
and as a result, some of the configuration options were not
FIPS-compliant.

This PR tweaks the configs to be FIPS-compliant.

Epic: DEVINF-478
Release note: None

cloud: add optional connection timeout retries and debugging

This optionally adds connection timeout errors to the set of errors to
retry in the resuming reader. Additionally, it adds logging to help
diagnose problems with long-lived connections.

Epic: none

Release note: None

cloud: add optional connection timeout retries and debugging

This optionally adds connection timeout errors to the set of errors to
retry in the resuming reader. Additionally, it adds logging to help
diagnose problems with long-lived connections.

Epic: none

Release note: None

Merge pull request cockroachdb#99481 from celiala/promote-candidate-t…

…o-alpha.8

Merge pull request cockroachdb#99293 from cockroachdb/blathers/backpo…

…rt-release-22.1-99278

release-22.1: sql: fix update helper optional from clause (cockroachdb#99293)

Co-Authored-By: Eric.Yang <eyang@roblox.com>

roachtest: GCE/AWS nightly and release roachtest for FIPS

Previously, roachtest nightly tests were limited to run on regular VMs.
In order to check FIPS functionality, we need to run the tests on
FIPS-enabled VMs.

This PR adds a flag in order to select FIPS-enabled GCE or AWS VMs.

* Added `--fips` flag.
* Added wrapper scripts to selectively run FIPS-enabled tests.
* Updated the AWS configs to have an alternative AMIs for FIPS.

Epic: DEVINF-478
Release note: None