diff --git a/third_party/istio-latest/net-istio.yaml b/third_party/istio-latest/net-istio.yaml
index 33e353697430..600c77649635 100644
--- a/third_party/istio-latest/net-istio.yaml
+++ b/third_party/istio-latest/net-istio.yaml
@@ -1,4 +1,4 @@
-# Generated when HEAD was 6a9a682d59d3ae8ff265270fcdb22b9a21edf8c9
+# Generated when HEAD was 4bf314c638188ff4e40290c525d545477f0b26f9
 #
 # Copyright 2019 The Knative Authors
 #
@@ -22,7 +22,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     serving.knative.dev/controller: "true"
     networking.knative.dev/ingress-provider: istio
 rules:
@@ -54,7 +54,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -93,7 +93,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -114,7 +114,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
     experimental.istio.io/disable-gateway-port-translation: "true"
 spec:
@@ -149,7 +149,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 data:
   # TODO(nghia): Extract the .svc.cluster.local suffix into its own config.
@@ -203,7 +203,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -221,7 +221,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -254,7 +254,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -271,14 +271,14 @@ spec:
         app: net-istio-controller
         app.kubernetes.io/component: net-istio
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "20230907-6a9a682d"
+        app.kubernetes.io/version: "20230908-4bf314c6"
     spec:
       serviceAccountName: controller
       containers:
         - name: controller
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/controller@sha256:6094b8b8a922541b68bc81dfbfe7581eae9c6d33d931bf1a8e5e9b20285e0b43
+          image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/controller@sha256:0001d48ef502d5576d725152d4d7d98e8071e3413ce5e20f7b59565e2a16201a
           resources:
             requests:
               cpu: 30m
@@ -357,7 +357,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 spec:
   selector:
@@ -371,14 +371,14 @@ spec:
         role: net-istio-webhook
         app.kubernetes.io/component: net-istio
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "20230907-6a9a682d"
+        app.kubernetes.io/version: "20230908-4bf314c6"
     spec:
       serviceAccountName: controller
       containers:
         - name: webhook
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/webhook@sha256:14bf0a807f35c1576372f90f57b9027c19e13d9b7451bc80d3e39a13cd228f86
+          image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/webhook@sha256:fb4b0597dce4d6fcc99322567d1f12ea0f467f7297441280ff6e3aae91aa7f94
           resources:
             requests:
               cpu: 20m
@@ -462,7 +462,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 
 ---
@@ -489,7 +489,7 @@ metadata:
     role: net-istio-webhook
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 spec:
   ports:
@@ -528,7 +528,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 webhooks:
   - admissionReviewVersions:
@@ -567,7 +567,7 @@ metadata:
   labels:
     app.kubernetes.io/component: net-istio
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20230907-6a9a682d"
+    app.kubernetes.io/version: "20230908-4bf314c6"
     networking.knative.dev/ingress-provider: istio
 webhooks:
   - admissionReviewVersions: