fix: exclude kubernetes client 36.0.0 to avoid anonymous auth bug#516
fix: exclude kubernetes client 36.0.0 to avoid anonymous auth bug#516krcmarik wants to merge 1 commit into
Conversation
Code Review by Qodo
1. Missing kubernetes minimum version
|
|
Report bugs in Issues Welcome! 🎉This pull request will be automatically processed with the following features: 🔄 Automatic Actions
📋 Available CommandsPR Status Management
Review & Approval
Testing & Validation
Container Operations
Cherry-pick Operations
Label Management
✅ Merge RequirementsThis PR will be automatically approved when the following conditions are met:
📊 Review ProcessApprovers and ReviewersApprovers:
Reviewers:
Available Labels
AI Features
💡 Tips
For more information, please refer to the project documentation or contact the maintainers. |
|
Warning Review limit reached
Your plan includes 1 review of capacity. Refill in 29 minutes and 43 seconds. Your organization has run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After more review capacity refills, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than trial, open-source, and free plans. In all cases, review capacity refills continuously over time. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
WalkthroughA single dependency constraint ChangesDependency Update
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Persistent review updated to latest commit a79a1c6 |
Kubernetes Python client 36.0.0 has a confirmed regression where Configuration.auth_settings() looks for api_key['BearerToken'] but all config loaders still write api_key['authorization']. This causes every authenticated request to silently fall back to system:anonymous. Error example: kubernetes.dynamic.exceptions.ForbiddenException: (403) Reason: Forbidden "system:anonymous" cannot get path "/apis" Upstream issues: kubernetes-client/python#2582 Fix merged upstream (PR #2585) but no 36.0.1 release yet. Using !=36.0.0 so future patched releases are picked up automatically.
|
Persistent review updated to latest commit 4fca363 |
|
Persistent review updated to latest commit 4fca363 |
|
/cherry-pick v2.11 v2.10 |
|
Cherry-pick requested for PR: |
|
@coderabbitai review |
✅ Actions performedReview triggered.
|
|
@coderabbitai full review |
✅ Actions performedFull review triggered. |
|
/verified |
|
@krcmarik please see qodo comments #516 (comment) |
|
@krcmarik fixed in the wrapper RedHatQE/openshift-python-wrapper#2730 Fix avaliable in https://github.com/RedHatQE/openshift-python-wrapper/releases/tag/v11.0.130 |
|
@myakove so I guess we do not need this here If the constraint is in openshift-python-wrapper, can we update the uv.lock to get it in? |
Yes, please close this PR and open new one for update ocp wrapper version |
Kubernetes Python client 36.0.0 has a confirmed regression where Configuration.auth_settings() looks for api_key['BearerToken'] but all config loaders still write api_key['authorization']. This causes every authenticated request to silently fall back to system:anonymous.
Error example:
kubernetes.dynamic.exceptions.ForbiddenException:
(403) Reason: Forbidden
"system:anonymous" cannot get path "/apis"
Upstream issues:
kubernetes-client/python#2582
Fix merged upstream (PR #2585) but no new release yet. Exclude kubernetes client 36.0.0 until a patched release is available.
Summary by CodeRabbit